Published 4 min read
Words with a dotted underline? Hover, focus or tap for a quick explanation.
The short answer: a cookie is a small piece of text saved in your browserThe app you use to visit websites, such as Chrome, Safari, Firefox or Edge. by a website. It can help the site remember your shopping cart or settings. Other cookies can help a business measure traffic or support online advertising. The difference is what information is being collected and why.
Why would a website want cookies?
Think of a cookie as a little reminder the website leaves with your browser. Without some way to remember you, a store might forget your cart every time you open another page. A site might also use optional tracking to see whether visitors find the information they're looking for.
Cookies are not automatically bad, and they are not the only way websites can remember or measure things. Some services use other browser storage or cookie-free tracking. Privacy rules can apply to those technologies too.
Four common reasons websites use them
| Type | What it does | Do visitors have a choice? |
|---|---|---|
| Essential | Helps features you've asked for work, like a shopping cart, secure sign-in or fraud protection. | Usually needed for that feature |
| Preferences | Remembers things like your language or display settings. | Depends on the purpose |
| Analytics | Measures visits and which pages or features people use, so a business can improve its website. | Often requires consent; optional at SBM |
| Advertising | Measures advertising or helps show ads based on your browsing activity. | Optional; consent rules can be stricter |
Why does every website have an annoying popup?
Not every website needs one. Privacy laws can require businesses to explain tracking and get the right kind of permission before collecting or using certain information. A popup is one way of presenting that choice; it's not a blanket legal requirement for every website that uses a cookie.
In Canada, businesses need meaningful consent when they collect, use or share personal information unless an exception applies. Quebec has additional rules for technologies used to identify, locate or profile people. If a site serves visitors in the European Union and EU cookie rules apply, non-essential tracking generally needs permission before it starts. The right setup depends on what your site does and which laws apply to your business and visitors.
That's why a good popup explains the choice without making people hunt for the button to say no. Saying no to optional analytics should not stop someone from reading your website, contacting you or buying what you're selling.
What happens when you click Accept or Only Necessary?
Accept Cookies
You allow the optional analytics explained in the popup. On Sites by Mike, this lets me measure visits and how people use the site so I can improve it.
Only Necessary
You decline optional analytics. The website and its contact forms still work. Necessary security and service processes can still run.
You should also be able to change your mind. On this site, the Cookie preferences link below the footerThe section at the very bottom of a webpage, usually with contact details, navigation and legal links.reopens the choice.
What does Sites by Mike actually use?
I use two optional measurement services, and neither loads until you accept. Google Analytics uses cookies to count visits and certain interactions. Ahrefs Web Analytics is cookie-free, but it can still measure pages visited, referral sources and some clicks or form activity. Cookie-free does not automatically mean that no information is collected.
I don't use these services for personalized advertising on this website. I don't deliberately send contact form answers to analytics. Your choice is stored in this browser for up to six months, and you can change it using Cookie preferences. If you withdraw consent, future optional tracking is stopped; that doesn't erase information already processed by a provider. The privacy policyexplains more about the tools and information involved.
Does your small-business website need a popup?
Maybe not. A simple website that only displays business details and uses no optional tracking may not need a cookie-consent banner. A store can use essential cart or checkout functionality without automatically needing permission for unrelated advertising. Add analytics, retargeting pixels, embedded third-party services or visitor profiling and the privacy decisions change.
For an example of the other checks that matter before a site goes live, see my website launch checklist. My approach is to use only what's useful, explain it in everyday language, ask when consent is needed, and let people say no without making the website miserable to use. You shouldn't have to accept marketing tracking just to find a phone number.
Four questions for your web designer
- What tools are collecting information about visitors?
- Which features genuinely need cookies to work?
- Do optional tracking tools stay off until the required consent is given?
- Can visitors easily decline and change their choice later?
This is general information, not legal advice. Requirements depend on where you operate, whom you serve, and which tools you use. For more detail, see the Privacy Commissioner of Canada's consent guidance, Quebec's Law 25 guidance and the European Union's cookie guidance.
Also helpful: more plain-English guides · the Sites by Mike privacy policy

