Does the GDPR define what the default behavior should be when the user refuses to specify? Does it vary by site? Is it like clicking either “Accept all” or “Reject all”?
Legally, the user has NOT allowed ANY cookies then. (The law still allows the technically needed ones)
But in practice, it is not easy to find out what a website does.
I have a question, it’s maybe stupid but still:
Aren’t cookies, like, files on your device?? Can’t you just forbid websites to write anything to disk??
Legally, you are right.
Technically, browsers do not offer all settings that you can dream of.
Install privacy possom and be done with it I say. You can set it to auto reject those popups
The incident is reported
they shove all their “special” cookies up your computer’s ass and it gets super stoned and forgets it’s not supposed to tell you about how they’ve already taken over the world.
legally as mentioned elsewhere, it’s supposed to treat it as a rejection, except for “necessary” cookies. but, eh… I’m not sure I would trust that. if there’s a website you’re concerned pushing cookies, use firefox’s private window mode. (I wouldn’t trust chrome to not just pretend like incognito actually did something. while it really does nothing.) all cookies are sandboxed, and deleted after you close the browser.