Comment by ratww

This is correct in GDPR. This is why you can’t use something like LocalStorage, ETags or something else as a loophole.