[Sharlin]

Huh? Of course those get remembered, and of course it's allowed by GDPR. If the websites you visit don't remember "reject all", they're doing it maliciously (or out of incompetence, I guess).