AIUI the law doesn't focus on cookies alone but on tracking. Tracking must be disclosed and the user must be able to opt-out. This includes server-side tracking

AIUI the law doesn't focus on cookies alone but on tracking. Tracking must be disclosed and the user must be able to opt-out. This includes server-side tracking such as log analysis.