Yes. And login state or preferences are perfectly valid "functional uses" that don't require consent (but need to be spelled out in the privacy policy by most i

Yes. And login state or preferences are perfectly valid "functional uses" that don't require consent (but need to be spelled out in the privacy policy by most interpretations of the law). The difference between first and third party cookies/embeds is only relevant when the third party may be collecting data (e.g. keeping access logs). This covers things like Google Fonts, Google Maps and social media embeds all of which should be opt-in and have fallback options (like an external link to the otherwise embedded post or map).