Accounts are created by invitation while sign-up is closed.
No analytics and no tracking cookies. Signing in with Google or Microsoft hands you to the provider's own page, and our server sets one short-lived security cookie while it does. The privacy policy names it.