Glossary · Privacy & regulation
Consent banner
A consent banner is the on-page prompt asking a visitor to accept or decline non-essential cookies and tracking, required under the EU ePrivacy Directive whenever a site stores or reads anything on the visitor’s device that isn’t strictly necessary.
The legal trigger for a consent banner isn’t the GDPR directly — it’s Article 5(3) of the ePrivacy Directive, which requires prior, informed consent before storing or accessing information on a user’s device, with an exception for storage strictly necessary to deliver a service the user asked for. Analytics cookies, advertising pixels, and cross-site tracking identifiers don’t fall under that exception, so a site using them needs a valid consent mechanism before those scripts fire — not just a banner that displays but one that actually blocks the tracking until consent is given.
Regulators across the EU have increasingly penalized "dark pattern" banners — an obvious "Accept" button paired with a buried or multi-click "Reject" — treating that asymmetry as invalid consent under GDPR’s requirement that consent be freely given and as easy to withdraw as to give. A compliant banner needs equally prominent accept and reject options, granular choices by purpose, and no pre-ticked boxes.
The banner itself is a symptom of a technical choice, not a legal requirement in isolation: a site that doesn’t use cookies or persistent identifiers for tracking has nothing to gate consent on. Ciphera’s own site runs Pulse for analytics, which identifies sessions without cookies or device storage, so ciphera.net does not show a cookie consent banner.