@codinghorror @dalias My main website is GDPR compliant and has no cookie banner. Instead, *if* I set a cookie that can be made to track someone, I ask *when* I set the cookie (ie when you log in).
Setting a cookie that doesn’t track a visitor does not require consent.