That's a totally legit way of "complying" with GDPR. An unacceptable way to do this is to present a consent screen that restricts access if consent is denied bu

That's a totally legit way of "complying" with GDPR. An unacceptable way to do this is to present a consent screen that restricts access if consent is denied but allows access otherwise (looking at you, Washington Post, but at least they provide an option to pay for a privacy-respecting experience). Cf §43.2 https://gdpr-info.eu/recitals/no-43/ https://gdpr-info.eu/recitals/no-43/