Even better, force them to respect something like https://globalprivacycontrol.org/

and prohibit showing an obtrusive popup.