This site uses Google Analytics 4 to see which pages are useful, and the analytics tag does not load until you choose Accept. Until then the site sends nothing to Google for analytics: no request, no cookie. If you never make a choice, that is where it stays. When you do accept, the consent signal (Google Consent Mode v2) is set to granted before the tag sends anything, so the whole visit, first page view included, is counted with your consent.
Choosing Accept loads the tag and sets analytics_storage to granted, for your browser only. Choosing Decline keeps the tag from loading at all, so nothing is sent to Google, and records the decline so you are not asked again. The advertising signals — ad_storage, ad_user_data, ad_personalization — remain denied in both cases. There is no branch of this site where they are enabled, because there is no advertising on it.
If you accept, two cookies appear and they are the only two: _ga, which holds the anonymous browser identifier, and _ga_C372PEK7KT, which holds the session state for this property. Both are first-party, both expire on their own, and neither carries anything you typed. Nothing else is written. The Google Ads conversion linker, which would otherwise add a third cookie called _gcl_au the moment analytics were allowed, is switched off in the tag configuration — it has nothing to link, because this site runs no advertising.
The previous arrangement is worth naming because it was wrong: analytics set a cookie on first paint, before any interaction, on a property serving Italy and the EU, with no consent surface anywhere in the page. That has been fixed. If you visited before that change and want the cookie gone, clearing site data for this domain removes it.