PRIVACY
Should you accept or reject cookies?
Decode cookie banners, common categories, legitimate interest, partner lists, and the choices that protect your privacy.
The short answer
If you do not want optional tracking, choose “Reject all,” “Necessary only,” or the equivalent. Use detailed settings when you want a specific optional feature. A banner’s labels are not standardized, and the legal meaning depends on where you are and what the website does.
A practical first choice
If a banner offers equally clear Accept all and Reject all choices, rejecting optional cookies is the simplest privacy-preserving choice. Essential functions should continue to work. If you want a specific feature, open the settings and enable only the relevant purpose.
Some websites call the second choice “continue without accepting,” “necessary only,” or “decline optional cookies.” Read the action itself rather than relying on its color or size.
What the common categories mean
| Category | Typical purpose | A useful question |
|---|---|---|
| Necessary or essential | Security, sign-in, carts, load balancing, or remembering the consent choice | Would the requested service fail without it? |
| Preferences or functionality | Language, region, interface choices, or an optional embedded feature | Do I want the feature that needs it? |
| Analytics or performance | Audience measurement and how visitors use a site | Who receives the data, and is it linked across visits? |
| Advertising or targeting | Ad measurement, profiles, personalization, and activity across services | Is this shared with outside partners or used across sites? |
Names are chosen by the website, so the explanation and vendor list matter more than the label.
What “legitimate interest” means
“Legitimate interest” is a claimed legal basis for some processing of personal data under laws such as the UK GDPR or EU GDPR. It is not a universal permission to store or access optional cookies. Cookie access rules and personal-data processing rules can overlap, and the exact result depends on the technology, purpose, and jurisdiction.
If a banner lists legitimate-interest processing, look for a separate control to object. A vendor may show both consent-based purposes and legitimate-interest purposes, so turning off only one group may not express every available choice.
The UK Information Commissioner says websites must give clear information and an appropriate means of consent for cookies that are not strictly necessary. See the ICO’s public cookie guidance.
What “partners” and “vendors” mean
These are outside organisations whose technology or services may be used for analytics, advertising, embedded media, fraud prevention, or other stated purposes. Open the list when available and check:
- how many organisations are listed;
- which purposes each partner claims;
- whether data may be combined with information from other services;
- how long identifiers or other data may be retained; and
- whether there is a control for each partner as well as each purpose.
A large partner count does not explain the risk on its own, but it tells you the decision covers more than the website you opened.
Can you change the choice later?
Usually. Look in the footer for “Cookie settings,” “Privacy choices,” or a small privacy icon. Changing the choice should affect future optional processing, but it may not erase data already collected. Browser controls can remove stored cookies separately.
If the banner disappears after a mistake, use the site’s settings first. If those are unavailable, clear that site’s cookies and reload it.
Why banners differ between websites
Rules and enforcement differ by country, the organisation offering the service, and the type of technology involved. The interface also reflects the site’s vendors and business model. This guide explains common choices; it does not determine whether a particular banner complies with every applicable law.
The European Commission’s own cookie policy is a useful example of separating first-party and third-party cookies and offering acceptance or refusal.