Not all information, only those that are not strictly necessary to provide the service (so e.g. a basic session cookie created once a user logs in or starts using the shopping cart, ... should not require consent)