> If you are storing identity info to allow the user to login that needs to be disclosed as essential. I believe you don't have to disclose session cookies. Th

> If you are storing identity info to allow the user to login that needs to be disclosed as essential. I believe you don't have to disclose session cookies. That's what GitHub did to get rid of banners. https://github.blog/2020-12-17-no-cookie-for-you/ https://github.blog/2020-12-17-no-cookie-for-you/