[_akhe]

"Analytics and optimization" is where all the nefariousness goes down IMO, even if it's "for the user". When a site predicts things for a user, some users are delighted by the UX while others are put off by being spied on. So even in the "to improve our UX" case, it's up to the tracked to decide if it's nefarious or not - if they consent or not. It makes more sense to always prompt when using them.

Also, I'm seeing headlines like "Are Internet Cookies About To Crumble?" (not really, but you know how tech media is!) but I wonder how much longer cookies are even going to be relevant.

When's the last time you did this:

  document.cookie = "username=John Smith; expires=Thu, 18 Dec 2013 12:00:00 UTC; path=/";

For most modern developers, the answer is never! They're not really used in modern development by us. Apparently about 40% of websites use cookies, and it's almost always for ad re-targeting - the only reason they make you auth again after clearing is really to auth you with the cookie, your auth with the site is usually just HTTP requests and doesn't require cookies.

TLDR I think they're going away anyway, they're passe and it makes too much sense for Google to obsolete competitors by suddenly dropping them. GDPR calling out cookies is like the American law that bans "magic mushrooms" - they should have been more specific in identifying a specific unlawful behavior.

Upvoted for the good info btw (it just didn't do anything lol) thanks for sharing