Does your app need a cookie banner? What the EU rules say
Ship ItChecked against the official sourceNot legal advice.
Source checked 4 Oct 2026 · Published 23 Oct 2026 · Last reviewed 23 Oct 2026 · By Ctrl+Z Therapy (how we test)
The short answer
Under the EU rules, any website that wants to use cookies has to get consent before installing a cookie, and simply telling people that it uses cookies is not enough. Cookies that are strictly necessary for an online service the user explicitly requested, like a shopping basket or filling in an online form, do not need consent. For everything else, ask first, explain what it's for, and let people withdraw their consent.
What to do
- List what your site stores.
- Mark which cookies are strictly necessary for something the user asked for, such as a shopping basket or an online form.
- For everything else, ask before it's stored, say what it's for, and let people withdraw their consent.
Good to know
- The EU has proposed simpler rules. They are still under negotiation, so this may change.
Source
Checked on 4 Oct 2026. Prices, limits and settings change, so check the source before you rely on them. Not legal advice.