Which cookies are non-essential under GDPR?

Non-essential cookies serve purposes beyond delivering a service the visitor has requested, such as advertising, tracking or optional personalisation. Under EU ePrivacy rules, these cookies generally require prior consent that meets GDPR standards. Common examples include:

• Advertising cookies: Build interest profiles, personalise advertisements or track visitors for remarketing.

• Analytics cookies: Measure visits, browsing patterns and interactions with website content.

• Social media tracking cookies: Allow social platforms to track visitors through embedded content or sharing tools.

• Personalisation cookies: Provide behaviour-based recommendations or optional customisation beyond the service requested.

Some audience-measurement cookies may qualify for narrow exemptions under national rules, as explained in CNIL’s guidance on audience measurement. Classification depends on the cookie’s actual purpose and configuration; being a first-party cookie does not automatically make it necessary.