Sure, and you can use cookies! Just not to store PII. Ultimately these things are actually optional - I don’t have a cookie banner on my site. Neither does my company I work for, because it’s an application.