You actually need to avoid cookies getting stored until users give their consent to do so. Probably something like the rack-policy Ruby gem linked below will he

You actually need to avoid cookies getting stored until users give their consent to do so. Probably something like the rack-policy Ruby gem linked below will help making sure there is no cookies at all. https://github.com/peter-murach/rack-policy#rack-policy https://github.com/peter-murach/rack-policy#rack-policy I ignore if there are similar libraries for other platforms.