Cookie Banners in Sweden: What the Law Requires

The short answer

We build every company website so that the banner is either compliant or unnecessary, and the second option is more often available than people think.

Which cookies need consent

The law does not distinguish between first-party and third-party cookies, or between cookies and other identifiers stored on the device. The test is purpose: is the storage necessary to deliver a service the visitor explicitly requested? A session cookie that keeps a shopping basket together passes. A cookie that measures visits, remembers an ad click or personalises content does not, however harmless it feels.

What a valid consent looks like

GDPR defines consent as freely given, specific, informed and unambiguous, expressed by a clear affirmative action. Applied to a banner, that means four things must be true. Nothing non-essential loads until the visitor clicks accept. The banner says in plain language what the cookies are for and who receives the data. The visitor can choose per purpose, not only all or nothing. And the visitor can withdraw consent as easily as giving it, typically through a link in the footer that reopens the settings.

• Load the consent tool first and gate every tag behind it. Google Tag Manager with Consent Mode does this if configured correctly; a banner pasted on top of already-loaded scripts does not.
• Name the purposes: necessary, statistics, marketing. Do not bury forty vendors in an expandable list and call it informed.
• Write the button labels as choices, not as instructions. Accept all and Reject all, not OK and Settings.
• Store the consent record with a timestamp and the version of your policy the visitor saw.

Reject as easy as accept

This is the point where most banners fail, and the one IMY and other EU regulators have written decisions about. If accepting is one green button and rejecting is a grey link that opens a second screen with toggles, the consent is not freely given, because the design pushes the visitor towards one answer. The same applies to a close cross that silently means accept, to a banner that blocks the page until you accept, and to reappearing banners that ask again on every visit until you give in.

The safe pattern is boring: two buttons of equal size and colour, Accept all and Reject all, plus a third link for settings. A visitor who rejects gets the same website, only without the tracking. If your business model depends on nudging people into accepting, the model, not the banner, is the problem.

Documenting consent

Under GDPR you must be able to demonstrate that consent was given. In practice that means your consent tool logs each choice with a pseudonymous identifier, a timestamp, the purposes accepted and the policy version, and keeps the log for as long as you rely on the consent. Most consent management platforms do this for you; a home-made banner with a single cookie rarely does. Pair the log with a cookie policy page that lists every cookie, its purpose, its lifetime and the party that sets it, and update that list every time a developer adds a script. A launch is the natural moment to audit it, which is why it sits in our website launch checklist.

Analytics without cookies as an alternative

The cleanest way to comply is to have nothing to consent to. Cookie-free analytics tools count visits, pages and referrers without storing an identifier on the device, and a company site that uses one, hosts its own fonts and embeds video with a click-to-load placeholder needs no banner. Many small Swedish businesses would lose nothing by switching: they never open the audience reports that cookies enable. We compare the options in our guide to cookie-free analytics.

When you should not remove the banner: if you run paid campaigns and need conversion measurement, if you retarget, or if you sell online and rely on Klarna or Shopify features that set identifiers. Then build the banner properly instead. Either way, a fifteen-minute review of your current tags tells you which camp you are in; book a call if you want us to look, or see our fixed prices for a site build or fix on the pricing page.

Frequently asked questions