Is a session cookie with datetime of access (and last visit somehow), so probably fine.

not up on cookies and Gdpr tbh, I deal with other types of data normally.