The 2009 ePrivacy directive, also known as "Cookie law", speaks of "the storing of information, or the gaining of access to information already stored, in the terminal equipment of a subscriber or user".

GDPR is concerned with all personal data processing, cookie or not is even more irrelevant to it applying.