A cookie wall is a website set-up that blocks access to the content until the visitor accepts cookies. There is no real way to say no: either you agree to tracking, or you cannot use the site. Some walls offer a paid alternative instead, an approach known as consent or pay.
How a cookie wall works
A normal cookie banner lets visitors accept or reject non-essential cookies and carry on either way. A cookie wall removes the reject route. The page is covered or blurred, scrolling is locked, and the only button that lets you in is Accept.
Softer versions achieve much the same thing less openly:
- a banner with Accept on the front and Reject buried several clicks deep in settings;
- a message saying that carrying on browsing counts as agreement;
- a Reject button that closes the banner but also locks key features, such as the contact form or prices, without any technical need.
Consent or pay is a specific kind of wall, used mostly by news publishers: accept tracking for free access, or pay a subscription for a version without personalised advertising.
Why it matters
Under PECR, consent for non-essential cookies must meet the UK GDPR standard, and part of that standard is that consent is freely given. The ICO‘s guidance is that making access to a site conditional on accepting non-essential cookies is, in most cases, unlikely to produce valid consent, because the visitor has no genuine choice. Implied consent from carrying on browsing does not count at all.
The ICO has accepted that consent or pay can be lawful, but only where it passes the tests set out in its published guidance: whether there is an imbalance of power between the site and its users, whether the paid option is broadly equivalent, whether the price is fair, and whether privacy is built into the design. A national news site and a local plumber are in very different positions on all four.
For most UK businesses, the commercial case against a wall is as strong as the legal one. A visitor comparing quotes from three kitchen fitters is not going to accept tracking to see your prices. They will go back to the search results and pick a competitor.
Common mistakes
- Copying a large publisher’s consent or pay model onto a small business site with no subscription product.
- Treating a high acceptance rate behind a wall as success; consent that is not freely given is not valid consent.
- Hiding Reject behind a Manage preferences link while Accept sits on the front.
- Locking the contact form or basket behind analytics consent when neither needs it to work.
- Believing a line saying that browsing on means you agree is enough.
How to act on it
Load your site in a private window and try to use it without accepting anything. You should be able to read every page, send an enquiry and buy, with only strictly necessary cookies set. If any of that is blocked, you have a wall, whether you meant to build one or not.
Next, check that Reject sits on the first layer of the banner, as prominent as Accept, and that no tags fire after rejection. Most consent management platforms can do this with a settings change rather than a rebuild. If a lower acceptance rate worries you, deal with it honestly: explain plainly why you use each type of cookie, and judge campaigns against your own enquiry and sales records rather than tracked conversions alone.
Setting up consent that is fair to visitors and still gives your campaigns usable data is part of my performance marketing service.