Cookies power login sessions, shopping carts, and analytics. First-party cookies are set by your own domain; third-party by external scripts. GDPR and CCPA require consent for non-essential cookies. If you run GA4 or Meta Pixel, you need a cookie banner.