A cookie like that doesn't need to contain any personal information and therefore does not need a user's consent to store under GDPR. As a cookie it does need t

A cookie like that doesn't need to contain any personal information and therefore does not need a user's consent to store under GDPR. As a cookie it does need the user to be notified (ePrivacy Directive aka its 2009 "cookies law" update), but that is/can be covered as part of the original request that the user clicks to reject optional cookies. The only reason to forget that a user said no is because it's a hostile interface designed to get users to give in and give their "consent".