Withdrawal has to be as easy as agreeing
What technically has to happen when consent is withdrawn, why it must not be harder than agreeing, and how it stays demonstrable.
3 minutes read
Privacy, explained
Blog
How consent, cookies and data protection fit together — in plain language, with diagrams that carry the argument.
Whoever claims consent has to prove it
What a consent record has to contain, how long to keep it, and why an entry in the browser does not suffice.
3 minutes read
Cookie walls and pay-or-consent: paying instead of agreeing
When a cookie wall is lawful, what the EDPB said about pay-or-consent in 2024, and which third option is demanded.
3 minutes read
Why "Reject" belongs on the first layer
Why supervisory authorities across Europe require refusing to be as easy as agreeing – and how to implement it.
3 minutes read
The six tricks in a consent banner
Hidden refusal, confirmshaming, false urgency: the common dark patterns in consent banners and why they invalidate consent.
2 minutes read
The five stores inside a browser
Cookies, local storage, session storage, IndexedDB and cache: what sets the stores apart and why all of them can require consent.
3 minutes read
Recognition without cookies
Fingerprinting, pixels, CNAME cloaking and server-side tagging: the methods beyond cookies and how the law treats them.
3 minutes read
Consent Mode v2, explained without the marketing
What Google Consent Mode v2 transmits, how basic and advanced differ, and why the signals do not replace consent.
3 minutes read
Script blocking: why "beforehand" is the whole point
How script blocking works, which three methods exist, and why consent after loading has no effect.
3 minutes read