Creator here - that's a fair point, disabled both. That's what I get for taking a lazy shortcut.
Won't put them back without adding consent.
There's also a first-party cookie called "visitor", though that will require a bit more work because there's actual functionality that depends on it.