What actually happens when you click 'Accept Cookies.'
You have seen the banner a thousand times. "This website uses cookies. Accept all." You click Accept because it is in the way. But what just happened?
What a cookie actually is
A cookie is a small file that a website saves on your device. Some cookies are useful — they remember that you are logged in, or what language you prefer. These are called "essential" cookies and they are harmless.
But there are other cookies. Advertising cookies. Tracking cookies. These are the ones that follow you from website to website. They watch what you look at, what you search for, what you click on. They build a profile of you that is used to show you targeted ads.
What 'Accept All' actually means
When you click "Accept All," you are saying yes to everything at once. Yes to analytics (counting your clicks). Yes to advertising (following you to other sites). Yes to screen recording (watching what you type). Yes to identity tools (figuring out who you are). All in one click.
Under India's data protection law (DPDP), consent is supposed to be specific. You should be able to say yes to analytics but no to ads. Yes to essential cookies but no to screen recording. One button for everything is not what the law intended.
The banner comes too late
Here is the part most people do not know: on many websites, the trackers start running before the cookie banner even appears. The page loads. Trackers fire. Your data is sent to outside companies. Then the banner appears and asks for your consent. But your data has already left.
Clicking "Accept" after the fact does not undo what already happened. It is like asking for permission after you have already taken something.
What you can do
Don't click Accept All. Look for a "Manage preferences" or "Reject all" option. If the website only gives you "Accept All" with no alternative, that is a red flag.
Use a tracker blocker. Install uBlock Origin on your browser. It blocks most advertising and tracking cookies automatically, regardless of what you click on the banner.
Clear your cookies regularly. Go to your browser settings and clear cookies every few weeks. This breaks the tracking chains that follow you across websites.
The policy says one thing. The website does another.
We compared what privacy policies promise with what websites actually do. The policy says "we use cookies to improve your experience." The website loads ad trackers before the page finishes loading. The policy says "you can opt out at any time." The trackers start before the consent banner appears.
Read the full investigation →How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.
Talk to Meridian Bridge Strategy →Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.
Get the template email →We investigated 107 Indian company websites. The public report shows what we found.