Do I need a cookie banner on my website?

TL;DR

A cookie banner is required if your website sets cookies or uses trackers that are not strictly necessary for the site to function. This includes Google Analytics, advertising pixels, third-party chat tools, and embedded video players. The GDPR and the ePrivacy Directive require explicit consent before setting these cookies. If your site targets users in Europe, the answer is straightforward: yes, you need a compliant cookie banner.

Why this question keeps coming up

The answer depends on what your site does, not on its size. A personal blog running Google Analytics is subject to the same rules as an e-commerce site with 50 trackers. The regulation applies as soon as a non-essential cookie is set on the user's device.

What is a cookie banner (and what it must do)

A cookie banner is a user interface element displayed to website visitors to inform them about the use of cookies and collect their consent before setting non-essential cookies. The distinction between displaying a banner and blocking scripts is critical. A banner that appears but lets trackers load in the background is not compliant.

When is a cookie banner required?

In Europe (GDPR + ePrivacy Directive)

A cookie banner is required if your site sets cookies or trackers that are not strictly necessary. The ePrivacy Directive requires prior consent before setting any non-essential cookie. The GDPR mandates that consent be freely given, informed, specific, and unambiguous. The CNIL requires the Reject button to be as visible as the Accept button. Pre-ticked boxes do not constitute valid consent.

In the United Kingdom

Since Brexit, the UK applies the UK GDPR and PECR. The requirements are very close to the European GDPR. The ICO has stepped up enforcement of cookie banners in recent years.

In the United States

There is no federal law requiring a cookie banner in the United States. However, the CCPA/CPRA in California requires a Do Not Sell or Share link and GPC compliance. Other states require opt-out mechanisms.

When is a cookie banner NOT necessary?

A cookie banner is not required if your site uses no non-essential cookies and only sets strictly necessary cookies for the technical operation of the site. Some privacy-friendly analytics tools work without cookies. Verify with a cookie scanner.

How to find out if your site needs a cookie banner

Scan your site to identify all cookies and trackers. If any analytics tools, advertising pixels, embedded content, or marketing tools are present, a compliant cookie banner is required.

What a compliant cookie banner must include

Clear and fair choice, granular categorization, effective technical blocking, proof of consent, withdrawal option, no pre-ticked boxes, and accessible information. This is a matter of technical cookie management.

Common mistakes (and how to avoid them)

Displaying a banner without blocking scripts. To configure a GDPR-compliant cookie banner, script blocking must be effective.

Using a cookie wall. Blocking access to content if the user refuses cookies is prohibited in most cases in Europe.

Ignoring Consent Mode v2. If you use Google Analytics or Google Ads, Consent Mode v2 must be configured.

Not testing on mobile. Many banners are compliant on desktop but unusable on mobile.

Treating the banner as a one-time project. Cookie compliance is an ongoing process, not a one-time setup.

Checklist: does my site need a cookie banner?

1. Scan your site to identify all cookies and trackers.
2. Classify cookies by category.
3. If non-essential cookies are present: a compliant cookie banner is mandatory.
4. Verify the banner offers a fair choice.
5. Verify scripts are effectively blocked before consent.
6. Configure Consent Mode v2 if you use Google services.
7. Record proof of consent.
8. Allow consent modification at any time.
9. Test the banner on both mobile and desktop.
10. Plan regular audits.

FAQ

Do I need a cookie banner if my site does not use Google Analytics? A cookie banner is required whenever your site uses any non-essential cookie or tracker, not just Google Analytics.

Does a brochure website without forms need a cookie banner? Yes, if that site uses an analytics tool, embeds videos, or loads third-party scripts that set cookies.

Is a cookie banner mandatory in the United States? There is no federal cookie banner requirement. California and other states require opt-out mechanisms.

Can I use a simple This site uses cookies popup? No, in Europe. An informational popup without a reject option does not constitute valid consent under the GDPR.

What happens if I do not add a cookie banner? In Europe, the absence of a compliant cookie banner exposes your site to enforcement actions. The GDPR provides for fines of up to 20 million euros or 4% of global annual turnover.

Does a cookie banner slow down my site? A well-designed CMP has minimal impact on performance. It blocks third-party scripts until consent is given.

Conclusion and next step

If your site sets non-essential cookies or trackers, a compliant cookie banner is mandatory in Europe. Start with a free scan of your site to identify exactly which cookies and trackers are active.