[_Chief]

> the only info we do store is your session's cookies (and only if you're logged in).

If this truly is the only cookie you store, then you may not need the cookie banner, you can explain the cookie usage in your Privacy Policy.

For gdpr[1], strictly necessary cookies, like for login as you describe, do not require consent to be obtain as long as their usage is explained like in your privacy policy.

[1] https://gdpr.eu/cookies/