Here's a question for someone who understands cross-site cookies (which isn't me): Why does www.google.com/maps 's site permissions show https://www.openstreetmap.org/ as one of the sites 'that can use cross-site cookies and site data'?