What do cookie banners actually mean?

Cookie banners exist because consent is legally required for anything beyond what the site genuinely needs to function. They are frequently designed to make accepting easier than declining, which is a design choice rather than a technical necessity.

Step by step

1. Understand what a cookie is.A small file a site stores in your browser to remember something between pages or visits — that you are signed in, what is in a basket, or that a particular browser has been seen before.
2. Separate essential from everything else.Essential cookies keep you logged in, hold a shopping basket, and provide security. These need no consent and cannot be turned off. Everything else — analytics, advertising, personalisation — is optional.
3. Know that declining is allowed.Rejecting non-essential cookies must not break the site's core function. If a page becomes unusable after declining, that is generally not compliant behaviour.
4. Look for reject all before manage preferences.Many banners have a reject or necessary-only button that is styled to be less noticeable. When only accept is prominent, the reject option is usually one click deeper under manage or settings.
5. Understand legitimate interest tabs.Some banners split purposes between consent and 'legitimate interest', with the latter switched on by default and hidden behind a second tab. Object to them there if you want to decline properly.
6. Recognise what third-party cookies do.Cookies set by a domain other than the one you are visiting — usually advertising networks — are what allow tracking across different sites. That is the category most people actually want to refuse.
7. Set browser-level defaults instead.Blocking third-party cookies in the browser settings applies everywhere and does not depend on each banner. Most browsers now do it by default, which is why the banners matter slightly less than they did.
8. Know why the banner keeps reappearing.Your choice is stored in a cookie. If you clear cookies, or use private browsing, or switch browser, the record of your preference goes with it and the banner returns.
9. Understand consent has a limit.Consent should be time-limited and re-asked periodically, and you should be able to withdraw it — usually through a link in the privacy policy or a small icon in a corner.
10. Do not confuse it with the privacy policy.The banner covers storage on your device. What the site does with data you actively give it — your name, address, purchases — is governed by the privacy policy, which is a separate matter.

Tips

• Blocking third-party cookies in browser settings once does more than answering a thousand banners individually.
• A browser extension that answers banners automatically saves time, though check what the extension itself does with your browsing before installing it.
• If a site makes rejecting genuinely impossible, that is reportable to the Information Commissioner's Office in the UK.

Common mistakes

• Clicking accept to make the banner disappear — It consents to tracking across sites, which is exactly what the banner exists to ask about. Reject all is almost always available and takes the same number of clicks.
• Assuming rejecting will break the site — Essential cookies keep working regardless. A site that stops functioning when you decline optional cookies is not behaving as it should.

Questions people ask