Consentfolio Do I Need a Cookie Banner?
You need a cookie banner if your website sets any non-essential cookie, which includes advertising, third-party analytics such as Google Analytics, and most tracking or embedded content. You can skip a banner only if every cookie you set is strictly necessary or covered by an exemption. For the great majority of commercial sites the answer is yes, because analytics and ads alone put you over the line.
The quick test: list what your site loads. If any of it tracks, advertises, or shares data with a third party, you need a banner.
The decision
| Your site sets... | Banner needed? |
|---|---|
| Only strictly necessary cookies (login, basket, security) | No |
| First-party analytics, operator only, with a free opt-out | No, under the UK exemption, but you must inform and offer opt-out |
| Google Analytics or other third-party analytics | Yes |
| Advertising, marketing or retargeting cookies | Yes |
| Embedded content that sets cookies (video, maps, social) | Yes |
| Anything shared with a third party for tracking | Yes |
The cases where you can skip it
Two situations genuinely avoid a banner:
- A truly minimal site. If you set only strictly necessary cookies and nothing else, no banner is required.
- First-party analytics, done narrowly. Under the DUAA 2025, analytics used only by you, with a simple free opt-out, is exempt in the UK. The moment you use Google Analytics or share data with a provider, the exemption falls away. See the DUAA 2025 and cookies.
Even in the second case you have to tell visitors and offer an opt-out, so you need a mechanism, if not a full consent banner.
If the answer is yes
You need a banner that blocks non-essential cookies before consent, offers equal-prominence accept and reject, and records the choice. See UK cookie law explained, cookie banner design, and cookie banner software.
Frequently asked questions
Do I need a cookie banner if I only use Google Analytics? Yes. Google Analytics shares data with Google, which needs consent, so a site running GA4 needs a banner. See is Google Analytics GDPR compliant?.
Does a small or personal site need a banner? Only if it sets non-essential cookies. A brochure site with no analytics or ads may not. Add analytics or embeds and the answer becomes yes.
Do embedded videos or maps trigger the need for a banner? Often yes. Embedded content frequently sets third-party cookies, which need consent, so it usually requires a banner.
Written by Tudor Rusmanica, founder of Consentfolio. Tudor has spent over a decade in agency SEO, working where search performance meets data protection: the analytics, tagging and consent setups that keep measurement useful and lawful. Connect on LinkedIn.
Published 13 July 2026. This guide is general information, not legal advice.