When you need a cookie consent banner
You almost certainly need a consent banner if your site uses any of these, because they set non-essential cookies or trackers:
- Analytics such as Google Analytics, Matomo or Plausible (when it uses cookies)
- Advertising or remarketing pixels (Google Ads, Meta Pixel, TikTok, LinkedIn)
- Embedded content like YouTube videos, maps or social media widgets
- A/B testing, heatmaps or session-recording tools
- Live chat or marketing automation that drops tracking cookies
If any of these run before the visitor agrees, you are storing or reading information on their device without consent — which the rules do not allow.
When you might not need one
If your website only uses strictly necessary cookies — for example, a login session, a shopping cart, security, or load balancing — you generally do not need to ask for consent for those. You should still tell visitors about them in a short cookie or privacy notice.
In practice, very few public websites are truly cookie-free: even a basic theme or an embedded font, video or analytics snippet can add non-essential cookies, which is why most sites do need a banner.
What the law actually requires
Two EU rules work together. The ePrivacy Directive (Article 5(3)) requires prior consent before storing or accessing information on a visitor's device, except for strictly necessary cookies. The GDPR (Article 7 and Article 4(11)) defines valid consent as freely given, specific, informed and unambiguous, and says it must be as easy to withdraw as to give.
The EDPB's Guidelines 05/2020 add the practical rules most banners get wrong: no pre-ticked boxes, rejecting must be as easy as accepting, and consent must be a clear affirmative action. The CJEU confirmed in the Planet49 case (C-673/17) that pre-ticked consent boxes are not valid.
This is general information, not legal advice. Your obligations depend on where you and your visitors are and what your site does — check with qualified counsel for your situation.
Does my blog need a cookie banner?
Usually yes. Most blogs run analytics, show ads, or embed videos and social posts — all of which set non-essential cookies. If your blog reaches visitors in the EU or UK, you need a consent banner even if the blog is a hobby or a free platform.
A personal page with no analytics, ads or embeds may be able to skip the banner, but as soon as you add Google Analytics or AdSense, consent is required.
What happens if you do not have one?
Beyond the risk of complaints and regulator action (GDPR fines can be significant), running trackers without consent erodes visitor trust and can put your Google Ads or Analytics setup out of step with Google's consent requirements. A clear, compliant banner is the simplest way to stay on the right side of all three.
How to add a cookie banner (free)
You can add a compliant banner in minutes with KookiOk: add your site, let it scan your cookies, design the banner (or let AI style it), and paste one line of code. Non-essential cookies stay blocked until visitors consent, and every choice is recorded as proof. It is free, with no website or page-view limits.
Add your free banner in minutesNo credit card · Unlimited sites and page-views
Start for freeFrequently asked questions
Do I legally need a cookie banner?
If your website uses non-essential cookies (analytics, ads, embeds) and reaches visitors in the EU or UK, then yes — the ePrivacy rules require prior consent before those load, and GDPR sets the conditions for valid consent. Strictly necessary cookies do not need consent.
Does my blog need a cookie banner?
Usually yes. Most blogs use analytics, ads or embedded media that set non-essential cookies, so a consent banner is required for EU/UK visitors — even on free blogging platforms.
Are cookie consent banners required by the GDPR?
Consent itself is required by the ePrivacy Directive for non-essential cookies, and the GDPR defines what valid consent looks like. A cookie banner is the standard way to obtain and record that consent, so in practice it is required for most sites.
Do I need consent for Google Analytics?
Yes. Google Analytics sets non-essential cookies, so in the EU and UK you need the visitor's consent before it loads. A consent banner that blocks Analytics until the visitor agrees handles this.
What happens if I do not have a cookie banner?
You risk complaints and regulator action under GDPR/ePrivacy, lose visitor trust, and may fall short of Google's consent requirements for Ads and Analytics. Adding a compliant banner removes that risk.
