[jessaustin]

Cookies are used for things as simple as nighttime color theme preference. Someone more knowledgeable than either of us will probably point out that GDPR doesn't care about cookies like that...

[aaronmdjones]

Actually I'm betting on the more knowledgeable to point out that browsers signal light/dark theme preferences automatically, without cookies.

https://drafts.csswg.org/mediaqueries-5/#prefers-color-schem...

https://caniuse.com/?search=prefers-color-scheme

[jessaustin]

Yes, that exists, obviously. However, it's perfectly valid for someone to prefer a particular site to override an OS or browser setting.

[PeterisP]

Yes, GDPR doesn't care about cookies like that, it starts to apply for personally identifiable cookies (e.g. ad tracking which tries to make unique id's) but not for generic "preference=nighttime" ones.