> Apparently I'm not the only one since there are a lot of business that offer "cookie policy management" as a service for companies. Those companies exist sol

> Apparently I'm not the only one since there are a lot of business that offer "cookie policy management" as a service for companies. Those companies exist solely to prey on people who can't find their way to a site like gdpr.eu Let me give you all of the law you couldn't understand in simple statements: 1. you don't track your users by default. period. no consent is needed 2. you need to store some data about a user because that is crucial to the core functionality of the website (e.g., keep user logged in, keep a user's shopping cart etc.), then you can use those cookies, and those cookies alone, for that functionality, and that functionality alone. 2.2. Do not store personally identifiable data. If you do, you're liable for protecting and not leaking it. When a user requests this, you must delete al of that user's data 3. For literally everything else you have to ask the user's consent. If you were actually building a simple website, you could've stopped at 1.