Cookie consent & banners explained

A plain-English explanation of cookie consent banners — why your website has one, what it does, and what visitors see when they interact with it.

If you have noticed a pop-up or bar at the bottom of your website asking visitors to accept cookies, that is a cookie consent banner. This guide explains why it is there, what it does, and what happens depending on what visitors choose.

Quick summary

A cookie consent banner tells visitors what storage and tracking your site uses and asks permission before running things that are not strictly necessary. EU and UK rules require consent for most of it, with some narrow exceptions. When visitors decline, GA4 does not store a cookie for them, so a share of your visits will not be counted in the normal way.

European and UK rules say you must give people clear information, and get their consent, before storing or reading information on their device — unless what you are doing falls into one of a small set of exceptions.

UK rules changed with the Data (Use and Access) Act, and the ICO finalised new guidance on 29 April 2026. There is now a narrow "statistical purposes" exception for collecting statistics about how visitors use your service, with a view to improving it. The ICO is careful about how far it goes: the exception "is not for identifying, tracking or monitoring people or groups of people who use your service" and "doesn't apply to things like online advertising". Even where it does apply, you still have to give people clear information and an easy way to object.

Whether your particular analytics setup falls inside that exception is a legal judgement about how the tools are configured, not a settings checkbox. It is not a question we can answer for you, and it is worth putting to your adviser before you decide to drop a banner. Most sites keep one.

This applies to your website if any of your visitors could be in the EU or UK, even if your business is based elsewhere.

Not legal advice

This page is general information to help you understand what your site is doing and why. It is not legal advice. Check with your own adviser before you rely on an exception or change your consent setup.

The banner is not just a visual notice. It is connected to your website's tag management system (usually Google Tag Manager). When a visitor interacts with it:

If they accept all cookies: Analytics (GA4), marketing pixels, and other tags are allowed to run normally.
If they decline or only accept essential cookies: Marketing tags are blocked. What happens to Google's own tags depends on how consent mode was set up. In Google's "advanced" setup the tags still load and send a cookieless ping instead of storing a cookie, and Google models part of the gap, so a declined visit is not simply invisible. In the "basic" setup the tags stay blocked until someone consents, and nothing is collected for that visit.
If they ignore it and keep browsing: Depending on the consent tool, tags may stay blocked until a choice is made. Under UK rules, carrying on browsing is not valid consent on its own.

Consent mode is not itself a banner. In Google's words, it "does not provide a consent banner or widget. Rather, it interacts with it." You still need a consent tool.

The banner normally stores the visitor's choice as a cookie (a necessary irony), so they are not asked again every visit.

Working from the ICO's rules, a consent banner should:

Clearly describe the types of storage and cookies used (analytics, marketing, preferences)
Take a clear, positive action to record consent — a pre-ticked box is not valid consent, and neither is someone simply carrying on browsing
Make it as easy to refuse as to accept (no dark patterns, like a big green "Accept" button next to tiny greyed-out "Decline" text)
Make it as easy to withdraw consent later as it was to give it (usually via a settings link in the footer)
Keep a record, since you have to be able to demonstrate you have valid consent
Not run anything non-exempt before consent is given

How does this affect my analytics data?

Because some visitors decline, your analytics will not capture every visit in the usual way. There is no published figure for how many, and it varies with your audience, your industry and where your visitors are. Do not treat a percentage you read online as applying to your site.

How much you lose depends on the setup. With consent mode's advanced implementation, declined visits are not simply lost: cookieless pings still reach Google, and Google fills part of the gap with modelled data. With the basic implementation, where tags are blocked until someone consents, those visits are missing altogether. Either way you end up with a sample rather than a complete census, which is fine for spotting trends and comparing months. Use your own records, not GA4, for anything financial.

Easy to miss

A sudden drop in analytics traffic can sometimes be caused by a consent banner change, not a real drop in visitors. If you change your consent setup, expect analytics numbers to shift.

Chykalophia configures and maintains the consent banner for you as part of your website setup or care plan. We use specialist tools designed to meet GDPR requirements and integrate correctly with Google Tag Manager.

If you want to update the wording on the banner or change which categories are presented, contact us.

Common questions

We strongly recommend keeping it. Removing the banner while your site still runs marketing or advertising tags leaves you without the consent those rules require, which is a risk worth taking advice on, particularly if you have European visitors.

Having a banner is not itself a problem. What Google's guidance warns about is how it behaves: don't obscure the whole page with an overlay, and don't send visitors to a separate page to give consent — that can leave Google unable to see your content. A small banner that leaves the page readable is fine.

What if my site is purely informational and uses no tracking?

If your site truly uses no non-essential cookies or tracking, you may not need a consent banner. However, many "simple" sites embed maps, videos or other third-party content that stores things on a visitor's device. We can audit your site's cookie usage if you are unsure.

Can I pre-tick 'accept' to make it easier for visitors?

No. Consent has to involve a clear and positive action. The ICO is explicit that continuing to use a website is not valid consent, and neither is a pre-ticked box. You also have to let people refuse as easily as they can accept.

Need a hand?

If you're stuck, email support@chykalophia.com and we'll help. Include your website address and a screenshot if you can.

Cookie consent & banners explained

What does the banner actually do?

How does this affect my analytics data?

Common questions

What if my site is purely informational and uses no tracking?

Can I pre-tick 'accept' to make it easier for visitors?

Learn more

On this page