[zkid18]

folks mess "cookie banner" with "consent banner". many people do conflate them, but in some jurisdictions (e.g., the EU under GDPR), a "cookie banner" typically includes a consent mechanism.

if you're tracking users for analytics using cookies, fingerprinting, or any other method that identifies them (even probabilistically), you generally need explicit consent under GDPR and similar privacy laws. The key point is that it's not just about cookies; any persistent tracking requires consent.

[dumbledoren]

> The key point is that it's not just about cookies; any persistent tracking requires consent.

The law mandates that you inform the user if you are setting any type of cookies. So its necessary to have a banner even if you don't need to get consent. You could inform the user in other ways, but cookie banners are easier.

[shadowgovt]

It was an interesting day when EU legislators made our Apache access logs questionably-legal.