What cookies are
A cookie is a small piece of information that a website asks your browser to store. When you return to the site, or move between its pages, the browser can send that information back. Cookies were designed to solve ordinary problems: remembering that you are signed in, keeping items in a basket, or remembering your language setting.
Over time, cookies and similar technologies also came to be used for measuring how many people visit a site and for recognizing a visitor across different sites, which is the basis of many advertising systems. That second group is the reason for the banners most people see.
Why banners exist
In several parts of the world, laws and regulations set expectations about how sites use cookies and similar tools, especially when they are not strictly needed to deliver what the visitor asked for. The details vary by country and region, and they change over time. A consent banner is the common way a site tries to explain what it uses and, where required, to ask for permission before using it.
This article gives general information only and is not legal advice. If your site serves visitors in regulated areas or collects sensitive information, consider consulting a qualified professional.
The typical categories
Banners and the settings behind them usually sort cookies into groups. Names vary, but the following are common.
- Strictly necessary: needed for the site to function, such as keeping you signed in or remembering security settings. These are often described as not requiring a choice.
- Preferences: remember choices such as language or layout.
- Statistics or analytics: help the site owner understand how pages are used, often in aggregate.
- Marketing or advertising: used to build profiles of interests or to show targeted ads, sometimes across many sites. See our look at tracking cookies and online ads for how that works.
Knowing the categories makes the choices easier. Declining marketing cookies, for example, does not usually stop a site from working.
The choices offered to visitors
A well-built banner typically offers some combination of these options:
- Accept all: allow every category.
- Reject all or only necessary: decline everything optional.
- Customize or manage preferences: pick categories individually.
- A link to more information: usually a fuller cookie policy or privacy page.
Whatever you pick can usually be changed later. Many sites provide a small link or icon, often near the footer, for reopening the settings. You can also clear stored cookies in your browser settings, which signs you out of sites and resets saved choices.
Some browsers also include controls that limit certain kinds of tracking. These do not replace a site’s banner, but they add another layer you control.
What good banners look like
Banners vary a great deal in quality. Features that generally make them easier to trust:
- The choices are equally easy to find. If accepting takes one click and declining takes several, visitors may feel steered.
- The wording is plain and says what each category is for.
- Nothing optional is switched on in advance before the visitor has chosen.
- The banner does not block the whole page more than it needs to.
- The visitor can change their mind later.
Regulators in some places have criticized designs that nudge people toward accepting, so clear and balanced layouts are both fairer and generally safer for the site owner.
Points for site owners
If you run a site, a few general steps help.
- Find out what your site actually sets. Many cookies come from add-on tools such as analytics, embedded videos, social buttons, fonts or advertising code, not just from your own pages. Your browser’s developer tools can list the cookies a page sets, and some scanning tools can also help.
- Remove what you do not need. Every tracker you do not use is one less thing to explain. A simple site may need little more than necessary cookies.
- Match the banner to reality. If your banner says analytics only run after consent, make sure that is truly the case. A mismatch between the notice and the behavior is worse than a modest notice that is accurate.
- Describe it in your policies. A cookie notice and a privacy policy should say consistent things, and both should be updated when you add or remove tools.
- Choose tools carefully. Many hosted site builders and consent tools provide ready-made banners. Check that they can block optional scripts until a choice is made, rather than just displaying a message.
- Re-check after changes. Adding a new widget can quietly introduce new cookies.
A related topic for sites that gather email addresses is email consent, which follows its own rules and expectations.
Limits of banners
A banner is not a complete privacy approach. It does not by itself make a site compliant with any law, and accepting or declining does not guarantee anything about how data is handled. It is one part of being open with visitors about what a site does with their personal data.
Visitors, too, have limits to their control: even with careful choices, some information, such as the device and browser details sent in any ordinary web request, still reaches the sites you visit.
Practical advice for visitors
- If you are unsure, choosing only the necessary cookies is usually the more privacy-protective option and is generally enough to use the site.
- Read the category names rather than clicking at random, especially on sites you use often.
- Remember that private browsing windows and regular browser clean-ups limit how long cookies last.
- Be cautious if a banner looks unlike the rest of the site or asks for anything beyond a cookie choice, such as a password or payment detail. Genuine cookie notices do not do that.
For site owners and visitors alike, the aim is the same: clear information and a real choice, expressed in language ordinary people can understand.