> That's the 'cookie law'[1], not the GDPR. As I understand it, you don't have to provide a way to say no. You just have to notify people before doing it. Not

> That's the 'cookie law'[1], not the GDPR. As I understand it, you don't have to provide a way to say no. You just have to notify people before doing it. Not even that, the "cookie law" is grossly misunderstood, since it already allowed things like "session cookies" and other account related settings/preferences without any sort of banner. What it banned/didn't allow (at least not without warning) is 3rd party/ad tracking cookies. Some companies just added blanket warnings "to be safe", everyone started mimicing that and now we have the insanity that is modern web publishing...