[sdoering]

Not sure were you are located, but if you are giving access to people protected by the GDPR your cookie notice does not fullfill the requirements set by European Regulations.

Additionally, if you are located in a country that (like Germany for example) has regulations on the necessity of an imprint, this might also be missing.

[autoencoders]

It should be ok, since I use strictly essential cookies, which don't require consent. (But users need to be informed)

Or do I misunderstand the law?

[1] Strictly necessary cookies — These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site. Cookies that allow web shops to hold your items in your cart while you are shopping online are an example of strictly necessary cookies. These cookies will generally be first-party session cookies. While it is not required to obtain consent for these cookies, what they do and why they are necessary should be explained to the user.

[1] - https://gdpr.eu/cookies/