Do you need a cookie banner? A plain-English guide
When a cookie banner is required, when it is not, and what a good banner must do: a clear explanation for WordPress site owners.
Cookie banners are everywhere, and many are badly done. Before adding one, it helps to know when the law expects it and what it should actually do. This is a plain-language overview, not legal advice.
When consent is needed
In the EU and UK, the ePrivacy rules require consent before you store or access information on a visitor’s device, unless it is strictly necessary to deliver the service they asked for. That covers cookies and similar technologies such as local storage and tracking pixels.
| Usually needs consent | Usually does not |
|---|---|
| Advertising and retargeting pixels | Remembering items in a shopping cart |
| Most analytics cookies and identifiers | Login session cookies |
| Social media tracking embeds | Security and fraud prevention |
| Third-party video embeds that set cookies | Storing the consent choice itself |
What a good banner does
- Explains in plain words what each category is for.
- Makes Deny as easy as Accept. Same prominence, same number of clicks.
- Does not pre-tick optional categories.
- Actually blocks non-essential scripts until consent.
- Remembers the choice and lets people change it later.
- Passes the choice to Google tags via Consent Mode if you use them. See Google Consent Mode v2 for WooCommerce, in plain English.
Common mistakes
- Showing a banner but letting trackers fire anyway
- A “Manage options” path buried three clicks deep
- Forgetting scripts pasted directly into the theme
- Caching the banner state so new visitors see the wrong one
Keep it small
A consent tool is a conversation at the top of every first visit; it should be light. Consentaro offers a simple Accept, Deny and Customize banner with a live preview, holds recognised trackers (Analytics, Meta Pixel, TikTok Pixel and more) until the matching category is allowed, and works with common caching plugins. It is a tool to help with consent, not legal advice or a substitute for a privacy policy.
Rules vary by country and by what your site does. When in doubt, ask a qualified professional or your data protection authority.
Frequently asked questions
Do all websites need a cookie banner?
No. If you only use strictly necessary cookies and no tracking or advertising technologies, a consent banner is generally not required, though you should still be transparent in your privacy policy.
Are analytics cookies exempt from consent?
Rules differ by country. Many regulators require consent for typical analytics; some allow limited privacy-friendly analytics without it. Check your local authority's guidance.
Can the Accept button be bigger than the Deny button?
Regulators expect refusing to be as easy as accepting. Avoid designs that nudge people toward Accept.
Does a banner alone make my site compliant?
No. Tags must actually be blocked until consent, and your privacy policy and data handling must match what you do.
