GDPR requires websites to get user consent before doing sketchy shit. You don’t need a cookie popup if you’re not a scumbag.