Thanks for mentioning what you did about “legitimate interest” - at least now it’s clear you don’t know what you’re talking about. I’d suggest reading up on it, looking at cookie banners on GDPR-compliant websites, and talking to privacy lawyers or people that regularly work in this space as a starting point. Have a good day!