[soyyo]

I believe that under GDPR cookies that are used only for technical purposes and not related to personal information are exempt from any consent and don't need to be informed with the infamous cookie banner.

Is not about cookies, is about their content and purpose.

[Waterluvian]

Indeed. Cookies are incredibly useful for things the user really does want, like staying logged in across sessions/tabs.

[jefftk]

A login cookie does not require a consent banner, because logging in is an explicit user request. But I didn't log into Sentry in my testing.

[jefftk]

Cookie banners predate the GDPR, and were initially a response to the ePrivacy Directive of 2002: https://en.wikipedia.org/wiki/EPrivacy_Directive

While the GDPR has added additional restrictions, the basic framework is still in force: you can't store information client-side (cookies, localStorage etc) unless (a) it is "strictly necessary" to fulfill a user request or (b) you get user consent. All the cookies above look to me like they don't meet that bar; the site seems to still fulfill my requests with cookies disabled.

(Not a lawyer.)