Cookie Walls: Are Websites Allowed to Block You for Rejecting Cookies
Patrick Bushe
February 4, 2025 · 5 min read
A cookie wall blocks a website until you accept its cookies. Whether that's allowed depends on where you and the site are, and on whether the site offers a fair alternative, such as a paid version without tracking. This is a general overview, not legal advice.
In the EU
Under the GDPR, consent has to be freely given. The European Data Protection Board, which brings together the EU's privacy regulators, has said that making access to a site depend on accepting tracking cookies means consent isn't freely given. So a plain "accept or leave" wall generally doesn't produce valid consent.
"Pay or OK" models, where you either accept tracking or pay for a version without it, are treated differently. Several national regulators have said they can be acceptable if the paid option is fair and reasonably priced, though views differ. For very large platforms, the rules are stricter: in 2025 the European Commission fined Meta under the Digital Markets Act over its pay-or-consent model for Facebook and Instagram.
In the UK
The UK regulator, the ICO, has said consent-or-pay can be lawful in some cases if users have a genuine choice, the price is fair, and the site explains it clearly. A wall with no alternative is on weaker ground.
In the US
There's no general law requiring cookie consent, so cookie walls are legal. State privacy laws such as California's instead give you the right to opt out of the sale or sharing of your data, often through a "Do Not Sell or Share" link or the Global Privacy Control signal.
What you can do when you hit a wall
- Look for a reject or "continue without" option hidden in the banner's settings.
- Use another source. The same news is usually available on a site that doesn't force tracking.
- Pay, if the subscription is worth it to you.
- Complain to the regulator in your country if you're in the EU and think the wall breaks the rules.
Cookie Auto-Reject clicks "reject" on ordinary cookie banners, but it can't get you past a wall. If a site refuses access after you reject, the choice is between accepting, paying or leaving.
Should you block all cookies?
No. Blocking every cookie breaks logins, carts and settings on most sites. Block third-party cookies instead, which stops most cross-site tracking, and reject non-essential cookies on banners. See what happens when you click Reject all.
