๐Ÿช
Websites

Cookie consent and GDPR: running a site legally

07.02.2026
โ† All articles

Cookie consent means asking a visitor for permission to use cookies. It's not just decoration โ€” it's a requirement of GDPR (EU), CCPA (US) and Uzbekistan's personal data law. Violations bring large fines (up to โ‚ฌ20M under GDPR).

What is a cookie?

A cookie is a small file in the browser. Types: 1) Necessary (cart, login, language) โ€” no consent needed. 2) Analytics (GA4, Metrika) โ€” consent needed. 3) Advertising (Facebook Pixel) โ€” consent needed. 4) Functional (chat, video).

GDPR requirements

1) Consent upfront โ€” before setting cookies. 2) Explicit โ€” "By continuing you agree" is not enough. 3) Choice โ€” "Necessary only" and "Accept all" buttons equal. 4) Withdrawal โ€” changeable anytime.

A correct banner

1) Bottom or center. 2) "Accept all", "Reject", "Customize" buttons. 3) "Reject" as easy as "Accept". 4) Link to the privacy policy.

Wrong (fine risk)

1) Only an "OK" button. 2) GA4 firing before the banner shows. 3) Pre-checked "agree" boxes. 4) The "Reject" button impossible to find.

Tools

Cookiebot, OneTrust, Osano. WordPress: Complianz, CookieYes. Or build your own with JS + localStorage.

Consent Mode v2 (Google)

Since 2024 Google requires Consent Mode v2 for ads and analytics. On refusal, Google uses modeled (anonymous) data.

Uzbekistan context

Uzbekistan has a personal data law. Local sites also need transparency. For EU clients โ€” GDPR is mandatory.

Privacy policy page

Along with the banner there should be a full Privacy Policy: what data is collected, why, how long it's stored.

Sayt.uz practice

Sayt.uz transparently asks for cookie consent. Analytics and advertising cookies fire only after consent.

Related articles

๐Ÿ˜• Useful 404 pages ๐Ÿ’ฌ Adding live chat and a chatbot to your site ๐Ÿ’ช Gym website: booking ๐ŸŽ“ School/University site structure
๐ŸŒ Language
๐Ÿ‡บ๐Ÿ‡ฟ O'zbek ๐Ÿ‡บ๐Ÿ‡ฟ ะŽะทะฑะตะบ ๐Ÿ‡ท๐Ÿ‡บ ะ ัƒััะบะธะน ๐Ÿ‡ฌ๐Ÿ‡ง English โœ“