When you visit a website, a box often pops up at the bottom of the screen asking whether you accept cookies. Do you remember whether your own site shows one? Or the opposite: if you never see one, is that a gap? Business owners ask me this often, because nobody wants to do something wrong and end up in trouble.
On the other hand, if you set the box up so that it simply pushes everyone to accept everything, or you skip it altogether, you can put both your visitors' trust and the health of your advertising and measurement data at risk. In this article I explain in plain language what cookies are, how they affect your business, and what to ask the person doing the work.
What are cookies and why does your site use them?
A cookie is a small note that a website leaves in your browser when you visit. It works like a waiter at a restaurant who recognizes you when you come back a second time.
Some cookies are necessary to run the site: keeping items in a shopping basket, for example, or remembering your language. Others are for measurement and advertising: how many people came, which page was read, what someone did after seeing an ad. Even if you never did anything yourself, these cookies may be running on your site, because the measurement and advertising tools added to it leave them automatically.
Why should you care?
There are three reasons:
- Trust: a site that says openly how visitor data is used looks more serious.
- Legal risk: data protection rules (such as GDPR in Europe and similar laws elsewhere) also apply to cookies. Details vary by country and by your business; for precise advice, consult a lawyer.
- Measurement and ads: a badly set up cookie notice can leave your measurement data incomplete or get your advertising account restricted.
So it is not just about showing a box on screen. It is about what the answer to that box actually does behind the scenes.
Do you need a cookie notice on your site?
Short answer: if anything on your site tracks visitors, most likely yes. If you use any of the following, your site should have a cookie notice:
| If your site has | Is a notice usually needed? |
|---|---|
| A tool that counts visitors | Yes |
| Ad tracking (social media or search ads) | Yes |
| A chat or live support window | Often yes |
| Embedded video or map | Sometimes, depending on how it works |
| Only what the site needs in order to run | Usually no consent needed, but information should be given |
If you are unsure, the best step is to ask who added what to your site. For a legal assessment, speak to your lawyer.
What you can check yourself
You can try these without any technical knowledge:
- Open your site in a private browser window. Does a cookie box appear on the first visit?
- Does the box offer "Reject" or "Only necessary" as an option? A box with only an "Accept" button is a problem.
- Does the box link to a cookie policy, and does that page open?
- If a visitor says "Reject", the measurement and advertising tools really must stop. You cannot see this yourself, so ask the person who did the work for written confirmation.
- Can visitors find the privacy and cookie texts at the very bottom of the page?
What the specialist should do
The person who sets up the cookie notice should:
- List which cookies your site uses and sort them into categories (necessary, measurement, advertising and so on).
- Build the consent box, showing accept and reject with equal prominence.
- Make sure measurement and advertising tools do not run until the visitor has agreed.
- Leave a link so visitors can change their decision later.
- Update the cookie list whenever a new tool is added.
- Prepare the cookie policy text to fit your business, or help get it prepared.
Questions to ask the person doing the work
- Which cookies does my site use, and can I see the list?
- When a visitor rejects, do measurement and advertising tools really stop?
- Is there a "reject" button in the box too?
- Who will update the notice when a new tool is added?
- Who will check the cookie text from a legal point of view?
If you get "don't worry about it" as an answer, keep asking for details.
Common mistakes
Three situations come up most often with the businesses I work with. First, the cookie box is visible but the tools keep running in the background, so data is collected even when the visitor rejects. Second, another site's cookie text is copied and pasted, even though every site uses different tools. Third, the box covers half the screen on mobile, and the customer leaves before seeing your site. The box should be simple, short and quick to close.
Frequently asked questions
What happens if I do not add a cookie notice?
If your site has measurement or advertising cookies, you may face legal risk and problems with your ad accounts. What happens depends on your business and country; for precise advice, consult a lawyer.
I run a small local business. Does this apply to me?
Size alone does not decide it. If your site uses a tool that measures visitors or tracks them for advertising, the same logic applies.
Does a cookie notice slow my site down?
A well-built box causes no noticeable slowdown. Heavy or badly made ones can delay the page opening, so ask the person doing the work about it.
Are a cookie policy and a privacy policy the same thing?
No. A cookie policy only describes cookies; a privacy text covers all the personal data you collect. The two can link to each other.
A cookie notice is part of telling visitors honestly what happens behind your site. Set up properly, it builds trust and keeps your measurement data healthy. If you want your site built right from the start with details like this covered, have a look at my website design service.