Cookie banners have become compliance theatre.
Cookie banners were meant to protect users. Instead, they’ve become:
- Conversion-killing popups
- A constant source of complaints
- A legal concern, filled with confusion
Most site owners & agencies use them because they're unsure, not because the law actually requires them — and many quietly wonder whether the banners they're showing are even compliant.
And even when a banner is required, many implementations fall short — missing basic legal requirements like genuine choice, equal “reject all” options, or proper pre-consent blocking.
The result is a lot of effort, a lot of friction, and very little confidence.
The simple truth
Under UK GDPR & PECR, consent is only required in specific, well-defined cases.
Banner not required
Authentication cookies
Authentication cookies are often strictly necessary in order to provide the requested service to end users. Where so, consent is not required.
Banner required
Analytics cookies
Analytics cookies are not strictly necessary, meaning; even though they are often used to improve the user experience, consent is required.
Banner not required
Third-party script
Scripts for security & DDoS protection are considered necessary. Where so, consent is not required and the script can be loaded before any user interaction.
We answer one question — properly...
“What does cookie compliance actually require for my site?”
Sometimes that means no banner at all.
Sometimes it means a banner is required — but only if it's implemented correctly.
We make that distinction clear.
Step 1
Run
We load your site in a real browser and observe how it behaves in practice. This is 100% production-safe and has no impact on your live site.
Step 2
Observe
We observe what actually happens — including cookies, scripts, storage, and network calls — across page loads and interactions. No assumptions. No checklists.
Step 3
Analyse
We classify what we observe based on purpose, timing, and behaviour — using current UK GDPR & PECR guidance. This is where “what's happening” becomes “what it's for”.
Step 4
Decision
We apply deterministic regulatory rules to reach a clear conclusion:
- Whether consent is required at all
- If required, whether your current banner meets the legal minimum
No “AI guesses”. No dark patterns. Just a defensible decision.
Step 5
Evidence
We produce clear supporting documentation that explains why the decision was reached, with evidence you can rely on.
This gives you confidence now — and a robust audit trail if you ever need it.
