You don't need to disable cookies, just make sure that users are aware of what they're doing (which I'd argue is the browser's job, not the website's). If you s

You don't need to disable cookies, just make sure that users are aware of what they're doing (which I'd argue is the browser's job, not the website's). If you send people a ticket number do you need to ask their permission for them to remember the number? No. Tracking cookies work the exact same way. We're in the weird situation where we're banning what is by far the best and most privacy preserving solution in the name of privacy. I mean can you come up with a way that is better than letting a user store data locally in their full control?