Skip to content
Sites by Mike

Website privacy · Explained simply

Cookies aren't the problem. Confusing popups are.

What websites remember, why they ask permission, and whether your small business needs a cookie popup at all.

By

Published 4 min read

Words with a dotted underline? Hover, focus or tap for a quick explanation.

The short answer: a cookie is a small piece of text saved in your by a website. It can help the site remember your shopping cart or settings. Other cookies can help a business measure traffic or support online advertising. The difference is what information is being collected and why.

Why would a website want cookies?

Think of a cookie as a little reminder the website leaves with your browser. Without some way to remember you, a store might forget your cart every time you open another page. A site might also use optional tracking to see whether visitors find the information they're looking for.

Cookies are not automatically bad, and they are not the only way websites can remember or measure things. Some services use other browser storage or cookie-free tracking. Privacy rules can apply to those technologies too.

Four common reasons websites use them

Different purposes, different privacy choices
TypeWhat it doesDo visitors have a choice?
EssentialHelps features you've asked for work, like a shopping cart, secure sign-in or fraud protection.Usually needed for that feature
PreferencesRemembers things like your language or display settings.Depends on the purpose
AnalyticsMeasures visits and which pages or features people use, so a business can improve its website.Often requires consent; optional at SBM
AdvertisingMeasures advertising or helps show ads based on your browsing activity.Optional; consent rules can be stricter

Why does every website have an annoying popup?

Not every website needs one. Privacy laws can require businesses to explain tracking and get the right kind of permission before collecting or using certain information. A popup is one way of presenting that choice; it's not a blanket legal requirement for every website that uses a cookie.

In Canada, businesses need meaningful consent when they collect, use or share personal information unless an exception applies. Quebec has additional rules for technologies used to identify, locate or profile people. If a site serves visitors in the European Union and EU cookie rules apply, non-essential tracking generally needs permission before it starts. The right setup depends on what your site does and which laws apply to your business and visitors.

That's why a good popup explains the choice without making people hunt for the button to say no. Saying no to optional analytics should not stop someone from reading your website, contacting you or buying what you're selling.

What happens when you click Accept or Only Necessary?

Accept Cookies

You allow the optional analytics explained in the popup. On Sites by Mike, this lets me measure visits and how people use the site so I can improve it.

Only Necessary

You decline optional analytics. The website and its contact forms still work. Necessary security and service processes can still run.

You should also be able to change your mind. On this site, the Cookie preferences link below the reopens the choice.

What does Sites by Mike actually use?

I use two optional measurement services, and neither loads until you accept. Google Analytics uses cookies to count visits and certain interactions. Ahrefs Web Analytics is cookie-free, but it can still measure pages visited, referral sources and some clicks or form activity. Cookie-free does not automatically mean that no information is collected.

I don't use these services for personalized advertising on this website. I don't deliberately send contact form answers to analytics. Your choice is stored in this browser for up to six months, and you can change it using Cookie preferences. If you withdraw consent, future optional tracking is stopped; that doesn't erase information already processed by a provider. The privacy policyexplains more about the tools and information involved.

Does your small-business website need a popup?

Maybe not. A simple website that only displays business details and uses no optional tracking may not need a cookie-consent banner. A store can use essential cart or checkout functionality without automatically needing permission for unrelated advertising. Add analytics, retargeting pixels, embedded third-party services or visitor profiling and the privacy decisions change.

For an example of the other checks that matter before a site goes live, see my website launch checklist. My approach is to use only what's useful, explain it in everyday language, ask when consent is needed, and let people say no without making the website miserable to use. You shouldn't have to accept marketing tracking just to find a phone number.

Four questions for your web designer

  1. What tools are collecting information about visitors?
  2. Which features genuinely need cookies to work?
  3. Do optional tracking tools stay off until the required consent is given?
  4. Can visitors easily decline and change their choice later?

This is general information, not legal advice. Requirements depend on where you operate, whom you serve, and which tools you use. For more detail, see the Privacy Commissioner of Canada's consent guidance, Quebec's Law 25 guidance and the European Union's cookie guidance.

Also helpful: more plain-English guides · the Sites by Mike privacy policy

Good websites. Less nonsense.

Need a website without unnecessary extras?

Tell me what your business needs. I'll recommend features that help your customers, and explain the privacy trade-offs.