Cookie wall: is it legal and what are the alternatives?

TL;DR

A cookie wall is a mechanism that blocks access to website content unless the visitor accepts non-essential cookies. Most European data protection authorities consider cookie walls a violation of freely given consent under the GDPR. A cookie wall is tolerated only in very limited cases, when a fair alternative is offered (such as paid access without trackers). In most cases, the cookie wall is a dark pattern to avoid.

What is a cookie wall?

A cookie wall is a mechanism that blocks access to website content until the visitor accepts non-essential cookies. Unlike a standard consent banner that allows browsing even when cookies are refused, the cookie wall makes acceptance mandatory to access the site.

A visitor facing a cookie wall has only two options: accept all cookies or leave the site. Some variants offer a choice between accepting cookies or subscribing to a paid plan ("pay or consent" model).

Is a cookie wall legal under the GDPR?

The GDPR requires consent to be freely given, specific, informed and unambiguous (Article 4(11)). Recital 42 specifies that consent should not be considered freely given if the data subject has no genuine choice.

A standard cookie wall (accept or leave) is considered non-compliant by most European data protection authorities, because it does not leave the visitor with a genuine choice.

The CNIL position has been clear since its 2020 guidelines. However, the CNIL nuanced this position in 2022 by accepting, under strict conditions, the "pay or consent" model for media sites offering a genuine paid alternative.

Is the "pay or consent" model a valid alternative?

The "pay or consent" model offers visitors a choice between accepting cookies (free access with trackers) or subscribing to a paid plan (access without trackers).

The CNIL accepts it under conditions for media sites whose business model relies on advertising, provided the paid subscription is reasonably priced. The European Data Protection Board (EDPB) issued an opinion in 2024 stating that this model is not always compliant and that the price must not be dissuasive.

In practice, this model remains controversial and legally risky. It is mainly used by large media sites and is not recommended for showcase sites, blogs or e-commerce stores.

Why cookie walls hurt your site?

High bounce rate. Visitors who do not want to accept cookies leave immediately.

Lost organic traffic. If search engine crawlers cannot access content behind the cookie wall, pages are not indexed correctly.

Degraded user experience. The cookie wall is perceived as aggressive and harms brand image.

Sanction risk. The CNIL has sanctioned sites using non-compliant cookie walls.

What are the alternatives to a cookie wall?

A well-designed consent banner, with Accept and Reject at the same level and clear text, achieves consent rates of 70% to 85% without constraining the visitor.

Granular per-category choice (analytics, advertising, social media) increases partial consent. Visitors accept analytics alone more easily than all trackers.

Contextual advertising (based on page content, not visitor profile) does not require advertising cookies and is an alternative to behavioural targeting.

A regular scan of your site helps reduce non-essential cookies and simplify the banner.

Checklist: alternatives to cookie walls

1. Verify that your banner offers a Reject button as visible as the Accept button.
2. Do not condition content access on cookie acceptance.
3. Offer granular per-category cookie choice.
4. Evaluate contextual advertising as an alternative to behavioural targeting.
5. Reduce non-essential cookies via a cookie audit.
6. Test different banner wordings and positions to optimise consent rates.
7. If the "pay or consent" model is considered, verify compliance with legal counsel.
8. Document the justification for each non-essential cookie.

Conclusion

The cookie wall is a dead end for most sites. It is legally risky, harms user experience and can affect SEO. Compliant alternatives (well-designed banner, granular choice, contextual advertising) maintain good consent rates without constraining visitors. Start with a free scan of your site to identify non-essential cookies and simplify your consent approach.