Do you need a cookie banner on a small website

For your trade 7 min read

Why most small trades sites do not need a cookie banner, what actually puts cookies on yours, and why the wrong banner is worse than none at all.

Every site you visit now throws a gray box over the screen before it will let you read anything. At some point you wondered whether yours is supposed to do that, and whether the absence of one is a problem waiting for you. Then a plugin offered to add a banner in one click, and it seemed easier to say yes than to find out.

What a cookie actually is

A cookie is a small note a website leaves in the visitor's browser so it can recognize the same browser later. Some are boring and necessary. A shopping basket remembering what is in it, a form remembering half-typed answers, a login staying logged in. Nobody has ever needed permission for those.

The kind that causes the argument is the one left by a different company through your page. Google's advertising tags leave one so it can recognize the same person on other sites. Meta leaves one so it can tell whether somebody who saw an advert later landed on your homepage. That note is for following a person from one site to another, and has little to do with your site.

Google Analytics is the odd one out on that list. It leaves a cookie too, but a first-party one that only your own domain can read, so it is not following anybody off your site. It still belongs in your privacy policy, and in Europe it still needs consent.

What puts them on a small trades site

If your site is pages, photographs, a phone number and a form, it very likely sets nothing worth a banner.

Things that change that: Google Analytics, a Facebook or Instagram pixel, Google Ads conversion tracking, an embedded YouTube or Vimeo video, an embedded Google map, a live chat bubble, a third-party booking or scheduling widget, and a review carousel pulled in from another platform. Some website builders also add their own visitor statistics without asking.

Notice how many of those arrived without a decision. An embedded video is dropped in because a video is nice to have. A pixel goes on because somebody once ran an advert for a month. Nobody sat down and chose to be tracking people.

The law, in the plainest version anybody can give you

Europe and the United Kingdom require consent before the tracking sort of cookie is set. That is where the gray box comes from, and it is why the internet looks the way it does.

The United States mostly does not work that way. Several states, Colorado included, give people a right to opt out of certain data sharing rather than requiring them to opt in first, and the laws that carry real weight have size thresholds a one-truck business does not reach.

So for a local trade with a local customer base, a banner is very rarely required of you. What I cannot honestly tell you is that no rule anywhere will ever touch your site, because that depends on who visits and what you have running. This is not legal advice, and if you sell across borders or handle anything sensitive, an hour with somebody qualified is worth the money.

A banner is not free

On a phone, the banner is the first thing between a stranger and your number. It covers the top of the screen, it needs a tap, and on a bad implementation the tap misses and the box stays. Every one of those is a chance for somebody with a burst pipe to go back to the search results.

It also slows the page. Consent tools are scripts that load before the rest of the site settles, and they arrive on the worst connections at the worst moments.

You are adding friction to the front door to ask permission for a tool you may not be using, so weigh that trade before you click install.

The banner that is worse than no banner

If you do end up with one, some versions actively work against you.

A box that says continuing means agreeing, with no way to decline. A box with the boxes already ticked. A banner that sets every tracker before the visitor has touched it, which is most of the one-click plugins in their default state. A full-screen wall on a phone with the close button off the edge. And the one that reappears on every page because the choice was never saved.

Each of those costs you visitors without delivering the thing the banner was supposedly for, which makes it worse than no banner.

Find out what your site is loading

You cannot decide this without knowing, and there are three ways to find out that do not require any technical skill.

Ask whoever built it, in exactly these words: does this site load Google Analytics, an advertising pixel, an embedded video, or a chat widget. Anybody who built it can answer in a sentence.

Look in your own accounts. If you have no Analytics login, no ad account and no chat subscription, that is a strong sign that none of it is running.

Or open your site on a laptop, right click, and choose the option to inspect. Then use the browser's find and search for these: googletagmanager, gtag(, connect.facebook.net, fbevents, fbq(. You are not reading the code. You are looking for whether a string is there.

Search for those rather than the plain words analytics and pixel. The current Google and Meta tags do not contain either word, so the obvious search comes back empty on a site that is tracking people. Choose inspect rather than view page source for the same reason: anything a plugin or a tag manager loads after the page arrives is not in the source at all. Better still, open the Network tab and reload the page, which lists every other company your page calls, by name.

The cheaper fix is to take the tracker off

If you have never once opened your analytics dashboard, and you are not running adverts, the tool is doing nothing for you at all. It is a plugin somebody installed in 2021 that now generates a compliance question every year.

Removing it is usually faster than configuring a banner, makes the site quicker, shortens your privacy policy, and ends the question.

Keep the tools you actually use. If you run adverts and read the numbers, keep the pixel, keep the banner honest, and disclose it properly.

Working out where you stand

• Write down every third-party thing on the site: analytics, pixels, videos, maps, chat, booking
• Cross off anything nobody has looked at in a year
• Ask your builder to remove those, and check the site still works afterwards
• If nothing tracking is left, you do not need a banner
• If something stays, say so plainly in your privacy policy
• Any banner must let somebody decline as easily as accept
• Test it on a phone, and check your number is still reachable with the box up
• Check the choice is remembered so it does not appear on every page

Questions people ask

Is my site illegal without a cookie banner

Almost certainly not, if you are a local business with local customers and nothing tracking on the site. The banner exists to ask permission for tracking, so no tracking means nothing to ask about.

My website builder added a banner automatically, should I leave it

Look at what it does first. Many are switched on by default while still loading every tracker before anybody clicks, which is the worst of both. If nothing on your site needs consent, turn it off.

Does an embedded Google map or YouTube video count

Both can set cookies from another company through your page, yes. If you only need to show where you are, a linked address is lighter and does the same job.

What about visitors from Europe

If you genuinely serve customers there, the stricter rules are a real consideration and worth proper advice. A plumber whose van does not leave the county is in a different situation.

Will removing Analytics hurt my Google ranking

No. Analytics measures visitors, it does not influence ranking, and Google does not need it installed to find or rank your pages.

Do I still need a privacy policy if I have no cookies at all

If the site has a contact form, yes, because the form collects real details from real people regardless of what else the site does.