[flagged]
I agree with you in abstract, but uMatrix solved this problem for me. Also, it's funny how people often say "the stupid cookie banners are there because of GDPR", but actually GDPR requires that the Reject button be as large and as easy to click as the Accept button, and somehow most companies do not care about this part. (Also, GDPR does not require a cookie banner when your website does not place cookies. Seriously…
You can place cookies and not need a cookie banner.
You just can't use consent as a legal basis when you haven't yet asked for consent, that's the only thing all these websites are doing: no legitimate reason for the invasive tracking they want to do and thus they're legally obliged to ask you in a clear way if you will consent to it.
If the data processing were to fall under a reason such as:
- in order to fulfill a contract (such as your visitor asking the website to log them in)
- or a legitimate interest (murky, but aggregated statistics like setting returnVisitor=true should fall under this)
- or one of the other reasons defined in GDPR (I think there are three more besides consent, like public interest, vital interest of the subject, and one more I forgot)
then you don't need to ask for consent to process this data or, specifically in this case, place this cookie.