[{"data":1,"prerenderedAt":249},["ShallowReactive",2],{"learn-\u002Flearn\u002Fcookie-banners-real-rejection":3,"learn-around-\u002Flearn\u002Fcookie-banners-real-rejection":240},{"id":4,"title":5,"body":6,"category":217,"description":218,"draft":219,"extension":220,"meta":221,"navigation":222,"path":223,"publishedAt":224,"readingTime":225,"seo":226,"sources":227,"stem":237,"updatedAt":238,"__hash__":239},"learn\u002Flearn\u002Fcookie-banners-real-rejection.md","Cookie banners and how to actually say no",{"type":7,"value":8,"toc":207},"minimark",[9,13,16,21,24,27,30,34,37,43,46,66,69,72,76,88,94,100,106,112,116,119,122,130,133,136,139,143,150,153,191,194,198,201,204],[10,11,12],"p",{},"Everyone hates cookie banners. Almost nobody reads them. Most people click whatever makes the\nbox go away fastest — which is exactly the behaviour the boxes are designed around.",[10,14,15],{},"Here is what they are for, what has gone wrong with them, and what saying no properly actually\ninvolves.",[17,18,20],"h2",{"id":19},"why-the-banners-exist","Why the banners exist",[10,22,23],{},"Under EU law — the GDPR together with the ePrivacy Directive — a site needs your permission\nbefore storing or reading non-essential information on your device. That covers advertising\ncookies, analytics cookies, and most of the tracking technology that follows you between sites.\nIt does not cover the strictly necessary things, like remembering you are logged in or what is in\nyour basket. Those need no banner.",[10,25,26],{},"The law asks for consent that is freely given, specific, informed, and unambiguous. In interface\nterms that means roughly three things: nothing is pre-ticked, saying no is as easy as saying yes,\nand you know what you are agreeing to before you agree to it.",[10,28,29],{},"That is the standard. Now the reality.",[17,31,33],{"id":32},"what-the-banners-actually-do","What the banners actually do",[10,35,36],{},"In 2020 researchers scraped the consent pop-ups of the five most popular consent management\nplatforms across the UK's top 10,000 websites — 680 sites in all — and checked them against the\nminimum requirements of European law.",[10,38,39],{},[40,41,42],"strong",{},"11.8% met them.",[10,44,45],{},"The specifics are worse than the headline:",[47,48,49,56,59],"ul",{},[50,51,52,55],"li",{},[40,53,54],{},"50.1% of the notices had no \"reject all\" button anywhere in the interface."," Not buried, not\nhidden — simply absent.",[50,57,58],{},"Where a reject option existed, it was one layer deeper than accept in 74.3% of cases.",[50,60,61,62,65],{},"An \"accept all\" button was ",[40,63,64],{},"never"," buried in a second layer. Not once.",[10,67,68],{},"That last detail is the one to hold onto. The asymmetry is not an accident of different teams\nmaking different choices. In a large sample, the convenient option was never the one that took\nan extra click. Somebody decided, consistently, which answer should be easy.",[10,70,71],{},"The study also ran a field experiment with real participants and found that these design choices\nmeasurably change what people consent to. Removing the opt-out from the first page increased\nconsent. Nudging with pre-selection increased consent. The designs work, which is why they\npersist.",[17,73,75],{"id":74},"the-tricks-by-name","The tricks, by name",[10,77,78,81,82,87],{},[40,79,80],{},"No reject button on the first screen."," You get \"Accept all\" and \"Manage preferences\". One is a\nclick; the other is a chore. This is ",[83,84,86],"a",{"href":85},"\u002Flearn\u002Fwhat-are-dark-patterns","obstruction",", applied to a\nlegal right.",[10,89,90,93],{},[40,91,92],{},"Pre-ticked boxes."," You open the preferences panel and the toggles are already on. Consent that\nyou have to withdraw was never consent you gave.",[10,95,96,99],{},[40,97,98],{},"\"Legitimate interest\" toggles."," A separate set of switches, often on by default, on a separate\ntab, which some vendors argue don't require consent at all. The practical effect is that turning\neverything off requires finding a second list of things to turn off.",[10,101,102,105],{},[40,103,104],{},"Sheer volume."," \"We and our 1,438 partners.\" Nobody is reviewing 1,438 partners. The number is\nitself the deterrent.",[10,107,108,111],{},[40,109,110],{},"The visual thumb on the scale."," Accept is a solid, coloured, high-contrast button. Reject is\ngrey text that doesn't look clickable. Both technically present. Only one designed to be pressed.",[17,113,115],{"id":114},"hiding-a-banner-is-not-rejecting-it","Hiding a banner is not rejecting it",[10,117,118],{},"This is the part that surprises people, and it matters more than any of the tricks above.",[10,120,121],{},"A lot of popular tools — the cosmetic filter lists in ad blockers, \"I don't care about cookies\"\nstyle extensions — work by hiding the banner element. The box disappears and the page looks\nclean.",[10,123,124,125,129],{},"But the banner was only ever the ",[126,127,128],"em",{},"interface",". Underneath it sits a consent management platform\nthat records a decision and passes it to advertisers. Hide the box without answering it and,\ndepending on the site, one of two things happens: no consent is recorded and some sites treat\ncontinued browsing as implied consent, or the default state — frequently \"accept\" — stands.",[10,131,132],{},"You have removed the question from your screen, not the tracking from your browser. The\nrelief is genuine and the protection is imaginary.",[10,134,135],{},"Rejecting properly means interacting with the consent platform the way the law intends: finding\nthe reject control, including the legitimate-interest toggles, and submitting a negative answer\nthat gets recorded. Done by hand, on every site, that is the chore everyone is trying to escape.\nDone automatically — as tools like Consent-O-Matic have demonstrated, by learning each platform's\ninterface and filling it in correctly — it takes no effort at all.",[10,137,138],{},"That is the difference between hiding and rejecting, and it's the one to insist on.",[17,140,142],{"id":141},"what-a-fair-banner-looks-like","What a fair banner looks like",[10,144,145,146,149],{},"You are looking at one. If you haven't seen our consent prompt yet, open ",[40,147,148],{},"Privacy settings"," in\nthe footer of this page and it will come back.",[10,151,152],{},"Here is what we committed to, and what you can check:",[47,154,155,161,167,173,179,185],{},[50,156,157,160],{},[40,158,159],{},"Accept and Reject are the same component."," Same size, same colour, same font weight, side by\nside. Not \"similar\" — literally the same button with different text, so they cannot drift apart\nas the site changes.",[50,162,163,166],{},[40,164,165],{},"Nothing is pre-selected."," There is no default answer sitting there waiting for you to not\nnotice it.",[50,168,169,172],{},[40,170,171],{},"Closing the banner counts as rejecting."," The × is not \"ask me later\" and it is not a quiet\nyes. It is a no, and the button says so.",[50,174,175,178],{},[40,176,177],{},"It never blocks the page."," No overlay, no scroll lock. You can ignore it entirely and read\nthe site, and ignoring it means nothing loads.",[50,180,181,184],{},[40,182,183],{},"Withdrawing is as easy as consenting."," One link in the footer of every page, always there.",[50,186,187,190],{},[40,188,189],{},"There are no partners."," There is one analytics tool, it is named, and it does not run until\nyou say yes.",[10,192,193],{},"We are not claiming credit for this. It is roughly what the law asked for in the first place. It\nis only remarkable because 88.2% of the sites in that study didn't manage it.",[17,195,197],{"id":196},"what-the-extension-will-do","What the extension will do",[10,199,200],{},"Can I Throw This? will handle consent properly on your behalf: recognising the major consent\nplatforms, submitting a genuine rejection rather than hiding the box, and turning off the\nlegitimate-interest toggles that hide on the second tab.",[10,202,203],{},"Where a banner uses one of the tricks above, it will say which one, so the pattern becomes\nvisible instead of just annoying.",[10,205,206],{},"And when we ask you a question on our own site, we will ask it the way we just did.",{"title":208,"searchDepth":209,"depth":209,"links":210},"",2,[211,212,213,214,215,216],{"id":19,"depth":209,"text":20},{"id":32,"depth":209,"text":33},{"id":74,"depth":209,"text":75},{"id":114,"depth":209,"text":115},{"id":141,"depth":209,"text":142},{"id":196,"depth":209,"text":197},"cookie-consent","Half of consent pop-ups never offer a reject button at all. Here's what the law asks for, what sites do instead, and why hiding a banner isn't the same as rejecting it.",false,"md",{},true,"\u002Flearn\u002Fcookie-banners-real-rejection","2026-09-21",7,{"title":5,"description":218},[228,231,234],{"label":229,"url":230},"Nouwens et al., \"Dark Patterns after the GDPR: Scraping Consent Pop-ups and Demonstrating their Influence\", CHI 2020","https:\u002F\u002Fdoi.org\u002F10.1145\u002F3313831.3376321",{"label":232,"url":233},"Consent-O-Matic (Aarhus University)","https:\u002F\u002Fgithub.com\u002Fcavi-au\u002FConsent-O-Matic",{"label":235,"url":236},"FTC staff report, \"Bringing Dark Patterns to Light\" (September 2022)","https:\u002F\u002Fwww.ftc.gov\u002Freports\u002Fbringing-dark-patterns-light","learn\u002Fcookie-banners-real-rejection",null,"cBrvooFyZnGIi606cCb0OGpDTypek34p-WaAaZhjn6g",[241,245],{"title":242,"path":243,"stem":244,"children":-1},"ClickFix: the fake CAPTCHA that makes you hack yourself","\u002Flearn\u002Fclickfix-fake-captcha","learn\u002Fclickfix-fake-captcha",{"title":246,"path":247,"stem":248,"children":-1},"Your ad blocker changed: the Manifest V3 story","\u002Flearn\u002Fmanifest-v3-your-adblocker","learn\u002Fmanifest-v3-your-adblocker",1790177868890]