Does the GDPR define what the default behavior should be when the user refuses to specify? Does it vary by site? Is it like clicking either “Accept all” or “Reject all”?
Does the GDPR define what the default behavior should be when the user refuses to specify? Does it vary by site? Is it like clicking either “Accept all” or “Reject all”?
and in practice, if you want a website not to recognize you from one place to the next, you need to make it TECHNICALLY impossible for them to do that (depending on severity: private browsing, IP changing, Tor), not just legally declare you don’t want them to