I clicked the Learn more link and got a privacy policy in what looks like Italian (?). That kinda limits the audience, but a quick skimming makes me suspect that your experience is 'improved' by having the data about your interaction with that website sent to Google for analysis.

They allow the site owner to measure traffic patterns in order to know what to improve and whether their actions had any effect at all.

It seems like the classic reaction to the GDPR - add a stupid cookie banner and it'll be fine. Truth is, it's not compliant.

If you want to be compliant you need to ask for consent before loading any of the creepy/stalky shit like Google Analytics and Facebook Like buttons.

Unless you're gonna do it properly you might as well not bother at all as you're still in breach of the regulations no matter what.

So how do we go about hammering sites for their poor compliance? We can sit here and shake our heads, but unless there is a lever to make them behave this poor behavior will continue.

I'm going to go out on a limb and assume the page itself has ads. Umatrix is reporting blocked requests from the usual culprits: googlesyndication, google-analytics, facebook, consensu.

Hi there. Thanks for pointing that out. My blog is usually read only by a bunch of nerds and when I put the first cookie banner, GDPR was not even a thing. I've added one that is compliant with the spec. Hope it's fine.

Hi. I clicked "I DO NOT ACCEPT" and it took me to https://europa.eu/. Then I clicked back, and it didn't show the banner anymore.

There are still 4 cookies set, including "euconsent" (set to some weird value), and "__cfduid" which I assume is some kind of unique identifier.

I don't know if you're serious about implementing GDPR compliance, but this isn't.

"__cfduid" is added by Cloudflare, and as far as I know, it can't be disabled.

__cfduid should be cloudflare for CDN...

cfdruid is a technical cookie and is exempt under GDPR.