Does my website need a cookie banner?
Not every website automatically needs one. What matters is what happens technically.
Short answer
Valid consent is generally required when information is stored on a user’s device or when information already stored there is accessed. Section 25(2) of the German TDDDG provides exceptions for the transmission of messages and for strictly necessary services. Whether that covers a specific service has to be checked case by case.
What you can check now
- List your cookies, local storage, embedded services and external font or analytics requests.
- Load non-essential services only after valid consent.
- A purely technical check does not replace a data protection review.
Please note: This is not legal advice. Have a professional check whether your specific service is strictly necessary.
Sources and date
- Section 25 TDDDG – Privacy on end devices (German) · As of 28.09.2026 · Evidence level A
- Editorial note (Lumeya) · As of 28.09.2026 · Evidence level C