<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Cookiesh · Blog</title><description>Practical guides on GDPR, cookie consent, Google Consent Mode and privacy engineering, written for the people who ship websites.</description><link>https://www.cookiesh.eu/blog</link><language>en</language><item><title>Does cookie consent cover localStorage, pixels and fingerprinting?</title><link>https://www.cookiesh.eu/blog/consent-beyond-cookies</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/consent-beyond-cookies</guid><description>Why EU consent rules apply to localStorage, tracking pixels, fingerprinting and other non-cookie technologies, based on Article 5(3) ePrivacy and EDPB Guidelines 2/2023.</description><pubDate>Thu, 29 Oct 2026 00:00:00 GMT</pubDate><category>GDPR</category><category>ePrivacy</category><category>localStorage</category><category>fingerprinting</category><category>tracking pixels</category><category>EDPB</category></item><item><title>Consent or pay: are cookie paywalls legal under GDPR?</title><link>https://www.cookiesh.eu/blog/consent-or-pay</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/consent-or-pay</guid><description>When a &apos;consent or pay&apos; cookie wall can be lawful in the EU and UK, what the CJEU, EDPB, CNIL and ICO have said, and how to design one that holds up.</description><pubDate>Thu, 29 Oct 2026 00:00:00 GMT</pubDate><category>GDPR</category><category>consent or pay</category><category>cookie walls</category><category>GDPR</category><category>EDPB</category><category>publishers</category></item><item><title>YouTube, Google Maps and other embeds: how to load them after consent</title><link>https://www.cookiesh.eu/blog/embedded-content-and-consent</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/embedded-content-and-consent</guid><description>Why embedded videos, maps and social posts need consent, why youtube-nocookie.com is not enough, and how to build an accessible click-to-load placeholder.</description><pubDate>Thu, 29 Oct 2026 00:00:00 GMT</pubDate><category>Engineering</category><category>embeds</category><category>YouTube</category><category>Google Maps</category><category>consent</category><category>JavaScript</category></item><item><title>Meta Pixel and cookie consent: a setup that respects the choice</title><link>https://www.cookiesh.eu/blog/meta-pixel-and-consent</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/meta-pixel-and-consent</guid><description>How to run the Meta Pixel and Conversions API with cookie consent: blocking before consent, fbq consent calls, the _fbp and _fbc cookies, Limited Data Use and GPC.</description><pubDate>Thu, 29 Oct 2026 00:00:00 GMT</pubDate><category>Ad tech</category><category>Meta Pixel</category><category>Conversions API</category><category>consent</category><category>advertising</category><category>GDPR</category></item><item><title>How to let visitors withdraw cookie consent (and what to do when they do)</title><link>https://www.cookiesh.eu/blog/withdraw-cookie-consent</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/withdraw-cookie-consent</guid><description>GDPR requires withdrawing consent to be as easy as giving it. How to design the withdrawal path, stop tags, delete cookies and update Consent Mode and your logs.</description><pubDate>Thu, 29 Oct 2026 00:00:00 GMT</pubDate><category>Guides</category><category>withdraw consent</category><category>GDPR</category><category>cookies</category><category>consent management</category><category>JavaScript</category></item><item><title>Managing cookie consent across many client sites</title><link>https://www.cookiesh.eu/blog/cookie-consent-for-agencies</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/cookie-consent-for-agencies</guid><description>An agency playbook for managing cookie consent across many client sites: roles and contracts, shared baselines, onboarding, monitoring and consent records.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Guides</category><category>agencies</category><category>consent management</category><category>Google Tag Manager</category><category>GDPR</category></item><item><title>Cookieless analytics: options, trade-offs and consent</title><link>https://www.cookiesh.eu/blog/cookieless-analytics</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/cookieless-analytics</guid><description>Cookieless analytics options compared, from server logs to daily hashes and fingerprinting, with trade-offs and why cookieless isn&apos;t automatically consent-free.</description><pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate><category>Engineering</category><category>analytics</category><category>cookieless</category><category>ePrivacy</category><category>privacy</category></item><item><title>Proof of consent: keeping audit-ready consent records</title><link>https://www.cookiesh.eu/blog/proof-of-consent-records</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/proof-of-consent-records</guid><description>What an audit-ready proof of consent record should contain, how long to keep it, and why tamper-evident, hash-chained consent logs hold up under scrutiny.</description><pubDate>Tue, 15 Sep 2026 00:00:00 GMT</pubDate><category>Guides</category><category>proof of consent</category><category>consent logs</category><category>GDPR</category><category>accountability</category></item><item><title>Server-side tagging and consent: what changes and what doesn&apos;t</title><link>https://www.cookiesh.eu/blog/server-side-tagging-and-consent</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/server-side-tagging-and-consent</guid><description>Server-side tagging moves vendor tags off the browser, but consent rules still apply. Learn what changes, what doesn&apos;t, and how to pass consent to your server.</description><pubDate>Tue, 01 Sep 2026 00:00:00 GMT</pubDate><category>Engineering</category><category>server-side tagging</category><category>consent</category><category>GDPR</category><category>analytics</category></item><item><title>How to block third-party scripts until consent</title><link>https://www.cookiesh.eu/blog/block-scripts-until-consent</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/block-scripts-until-consent</guid><description>A developer&apos;s guide to blocking third-party scripts until consent: inert script tags, activation code, tag managers, embeds and how to test that nothing leaks.</description><pubDate>Thu, 20 Aug 2026 00:00:00 GMT</pubDate><category>Engineering</category><category>scripts</category><category>consent</category><category>JavaScript</category><category>ePrivacy</category></item><item><title>Handling cookie consent in single-page apps</title><link>https://www.cookiesh.eu/blog/consent-in-single-page-apps</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/consent-in-single-page-apps</guid><description>How to handle cookie consent in React, Vue and other SPAs: shared consent state, route-change tracking, SSR hydration, gated embeds and instant withdrawal.</description><pubDate>Tue, 11 Aug 2026 00:00:00 GMT</pubDate><category>Engineering</category><category>SPA</category><category>React</category><category>consent</category><category>JavaScript</category></item><item><title>Cookie banners and Core Web Vitals: keeping LCP, CLS and INP green</title><link>https://www.cookiesh.eu/blog/cookie-banners-core-web-vitals</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/cookie-banners-core-web-vitals</guid><description>How cookie banners hurt LCP, CLS and INP, and how to fix it: load consent scripts async, avoid layout shift, defer the preference center and yield in handlers.</description><pubDate>Thu, 30 Jul 2026 00:00:00 GMT</pubDate><category>Engineering</category><category>Core Web Vitals</category><category>performance</category><category>cookie banner</category><category>INP</category><category>CLS</category></item><item><title>IAB TCF 2.2 explained for publishers and advertisers</title><link>https://www.cookiesh.eu/blog/iab-tcf-2-2-explained</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/iab-tcf-2-2-explained</guid><description>What the IAB TCF 2.2 is, how the TC String and Global Vendor List work, what changed from version 2.1 and what publishers and advertisers need to do about it.</description><pubDate>Tue, 21 Jul 2026 00:00:00 GMT</pubDate><category>Ad tech</category><category>IAB TCF</category><category>programmatic advertising</category><category>consent</category><category>GDPR</category></item><item><title>Basic vs. advanced consent mode: which should you use?</title><link>https://www.cookiesh.eu/blog/basic-vs-advanced-consent-mode</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/basic-vs-advanced-consent-mode</guid><description>Basic vs. advanced Google Consent Mode compared: tag loading before consent, cookieless pings, conversion modeling, privacy risk and which one to pick.</description><pubDate>Thu, 09 Jul 2026 00:00:00 GMT</pubDate><category>Ad tech</category><category>Google Consent Mode</category><category>Google Ads</category><category>GA4</category><category>conversion modeling</category></item><item><title>Google Consent Mode v2: a complete implementation guide</title><link>https://www.cookiesh.eu/blog/google-consent-mode-v2-guide</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/google-consent-mode-v2-guide</guid><description>How to implement Google Consent Mode v2: the four consent signals, gtag default and update commands, Tag Manager setup, regional defaults and testing.</description><pubDate>Tue, 30 Jun 2026 00:00:00 GMT</pubDate><category>Ad tech</category><category>Google Consent Mode</category><category>Google Ads</category><category>GA4</category><category>Google Tag Manager</category><category>consent</category></item><item><title>Global Privacy Control (GPC): what it is and how to honor it</title><link>https://www.cookiesh.eu/blog/global-privacy-control</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/global-privacy-control</guid><description>What the Global Privacy Control signal is, where honoring it is legally required, and how to detect it with navigator.globalPrivacyControl and Sec-GPC.</description><pubDate>Thu, 18 Jun 2026 00:00:00 GMT</pubDate><category>Global privacy</category><category>GPC</category><category>CCPA</category><category>opt-out</category><category>JavaScript</category></item><item><title>UK GDPR and PECR: cookie rules in the United Kingdom</title><link>https://www.cookiesh.eu/blog/uk-gdpr-pecr-cookies</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/uk-gdpr-pecr-cookies</guid><description>How UK cookie law works: PECR consent rules, the UK GDPR consent standard, what the ICO expects from banners and the 2025 reforms to watch before you change.</description><pubDate>Tue, 09 Jun 2026 00:00:00 GMT</pubDate><category>Global privacy</category><category>UK GDPR</category><category>PECR</category><category>ICO</category><category>consent</category></item><item><title>LGPD and cookie consent in Brazil: what websites need to know</title><link>https://www.cookiesh.eu/blog/lgpd-cookie-consent-brazil</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/lgpd-cookie-consent-brazil</guid><description>How Brazil&apos;s LGPD applies to cookies: legal bases, when consent is needed, what the ANPD expects from cookie banners and how it differs from EU cookie rules.</description><pubDate>Thu, 28 May 2026 00:00:00 GMT</pubDate><category>Global privacy</category><category>LGPD</category><category>Brazil</category><category>ANPD</category><category>consent</category></item><item><title>CCPA and CPRA: what US privacy law means for cookies</title><link>https://www.cookiesh.eu/blog/ccpa-cpra-cookies</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/ccpa-cpra-cookies</guid><description>How the CCPA and CPRA apply to cookies: when ad trackers count as selling or sharing data, the opt-out link, GPC signals and what your website needs.</description><pubDate>Tue, 19 May 2026 00:00:00 GMT</pubDate><category>Global privacy</category><category>CCPA</category><category>CPRA</category><category>California</category><category>opt-out</category><category>cookies</category></item><item><title>How to run a cookie audit on your website</title><link>https://www.cookiesh.eu/blog/how-to-run-a-cookie-audit</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/how-to-run-a-cookie-audit</guid><description>A step-by-step guide to auditing cookies and trackers: scope your site, capture what loads, categorize each item, test consent behavior and fix the gaps.</description><pubDate>Thu, 07 May 2026 00:00:00 GMT</pubDate><category>Guides</category><category>cookie audit</category><category>cookies</category><category>compliance</category><category>consent</category></item><item><title>How to write a cookie policy: structure and examples</title><link>https://www.cookiesh.eu/blog/how-to-write-a-cookie-policy</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/how-to-write-a-cookie-policy</guid><description>A practical guide to writing a cookie policy: what the law expects, a section-by-section outline, an example cookie table, and tips for keeping it current.</description><pubDate>Tue, 28 Apr 2026 00:00:00 GMT</pubDate><category>Guides</category><category>cookie policy</category><category>transparency</category><category>GDPR</category><category>ePrivacy</category><category>CCPA</category></item><item><title>How to design a cookie banner that is compliant and user-friendly</title><link>https://www.cookiesh.eu/blog/cookie-banner-design-best-practices</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/cookie-banner-design-best-practices</guid><description>Design a cookie banner that meets GDPR expectations and respects visitors: equal choices, plain copy, accessible markup, no layout shift, easy withdrawal.</description><pubDate>Thu, 16 Apr 2026 00:00:00 GMT</pubDate><category>Cookies</category><category>cookie banners</category><category>UX</category><category>accessibility</category><category>consent</category><category>design</category></item><item><title>Cookie banner dark patterns regulators target</title><link>https://www.cookiesh.eu/blog/cookie-banner-dark-patterns</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/cookie-banner-dark-patterns</guid><description>Pre-ticked boxes, hidden reject buttons and cookie walls can invalidate consent. See which banner dark patterns regulators target and how to fix them.</description><pubDate>Tue, 07 Apr 2026 00:00:00 GMT</pubDate><category>Cookies</category><category>dark patterns</category><category>cookie banners</category><category>consent</category><category>GDPR</category><category>enforcement</category></item><item><title>What counts as a strictly necessary cookie?</title><link>https://www.cookiesh.eu/blog/strictly-necessary-cookies</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/strictly-necessary-cookies</guid><description>Learn which cookies qualify as strictly necessary under the ePrivacy Directive, how to test each one, and the mislabeling mistakes regulators look for.</description><pubDate>Tue, 24 Mar 2026 00:00:00 GMT</pubDate><category>Cookies</category><category>strictly necessary cookies</category><category>ePrivacy</category><category>consent</category><category>cookie categories</category></item><item><title>Types of cookies: first-party, third-party, session and persistent</title><link>https://www.cookiesh.eu/blog/types-of-cookies</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/types-of-cookies</guid><description>Learn the main types of cookies, from first- and third-party to session and persistent, and why a cookie&apos;s purpose decides whether you need consent.</description><pubDate>Thu, 12 Mar 2026 00:00:00 GMT</pubDate><category>Cookies</category><category>cookies</category><category>first-party cookies</category><category>third-party cookies</category><category>ePrivacy</category></item><item><title>What cookie enforcement actions teach website owners</title><link>https://www.cookiesh.eu/blog/cookie-enforcement-lessons</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/cookie-enforcement-lessons</guid><description>From the CNIL&apos;s fines against Google and Facebook to the Planet49 ruling, see which cookie consent mistakes regulators punish and how to check your own site.</description><pubDate>Tue, 03 Mar 2026 00:00:00 GMT</pubDate><category>GDPR</category><category>GDPR</category><category>enforcement</category><category>CNIL</category><category>fines</category></item><item><title>Can you rely on legitimate interest for cookies?</title><link>https://www.cookiesh.eu/blog/legitimate-interest-and-cookies</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/legitimate-interest-and-cookies</guid><description>Legitimate interest cannot replace consent for non-essential cookies in the EU. Learn why, where it still applies, and what TCF 2.2 changed for publishers.</description><pubDate>Tue, 17 Feb 2026 00:00:00 GMT</pubDate><category>GDPR</category><category>GDPR</category><category>legitimate interest</category><category>ePrivacy</category><category>IAB TCF</category></item><item><title>The conditions for valid cookie consent under GDPR</title><link>https://www.cookiesh.eu/blog/valid-consent-checklist</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/valid-consent-checklist</guid><description>A practical checklist of the GDPR conditions for valid cookie consent: freely given, specific, informed, unambiguous, provable and easy to withdraw.</description><pubDate>Tue, 03 Feb 2026 00:00:00 GMT</pubDate><category>GDPR</category><category>GDPR</category><category>consent</category><category>checklist</category><category>cookie banner</category></item><item><title>ePrivacy Directive vs. GDPR: how cookie rules really work</title><link>https://www.cookiesh.eu/blog/eprivacy-directive-vs-gdpr</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/eprivacy-directive-vs-gdpr</guid><description>The ePrivacy Directive decides when cookies need consent; the GDPR defines what valid consent means. Here is how the two EU laws fit together in practice.</description><pubDate>Tue, 20 Jan 2026 00:00:00 GMT</pubDate><category>GDPR</category><category>ePrivacy</category><category>GDPR</category><category>cookie law</category><category>EU law</category></item><item><title>GDPR cookie consent requirements explained</title><link>https://www.cookiesh.eu/blog/gdpr-cookie-consent-requirements</link><guid isPermaLink="true">https://www.cookiesh.eu/blog/gdpr-cookie-consent-requirements</guid><description>What GDPR and the ePrivacy Directive require before you set cookies: prior opt-in consent, an equal reject option, easy withdrawal and proof of consent.</description><pubDate>Thu, 08 Jan 2026 00:00:00 GMT</pubDate><category>GDPR</category><category>GDPR</category><category>cookie consent</category><category>ePrivacy</category><category>compliance</category></item></channel></rss>