I would like my web site to be as GDPR friendly as possible. I don’t make use of tracking, advertising or analytics.
On a web site, we might have want to track the following:
- Login cookies — has this user logged in?
- Latest Page number in a catalogue.
- Saved stories — say in local web storage rather than in a cookie.
I’m assuming that the cookies in the first two are effectively part of the requested service, so don’t actually required user consent.
I’m also guessing that the last one, where the data is stored locally and never leaves the browser would also not need consent.
Would this be a reasonable interpretation?