Consent is implied for everything needed to deliver a service to the user (e.g. cookies for a shopping cart, local storage for gaming high-scores, etc.).

Anything that's not required to provide users with the service they're after must either not track them or ask for explicit consent before doing so.