You've seen the pattern a hundred times. You land on a small business website, ready to find their hours or read about a service, and the screen is covered by a giant box asking you to "Accept Cookies" or "Manage Preferences."
Most visitors do one of three things: they tap Accept to make it go away, they fight with the Reject button, or they leave. Whichever they choose, the experience starts with friction.
Here's the surprising part: in most cases, the cookie banner isn't required. It's a side effect of a choice the website made — often without realizing it.
What the law actually says
Privacy regulations like GDPR (Europe) and CCPA (California) require businesses to ask consent before placing non-essential cookies on a visitor's device — particularly cookies used to track that visitor across other websites for advertising or analytics.
Cookies that are strictly necessary for the site to function — like a session cookie for a logged-in shopping cart — generally don't require explicit consent.
So the question is: does your site actually drop tracking cookies on every visitor?
Most small business sites don't need to
If your site is a marketing site — informational pages, a contact form, maybe a blog — you almost certainly don't need any tracking cookies at all. The reason most small business sites have a cookie banner is that they installed Google Analytics, which by default places tracking cookies.
The fix isn't a fancier cookie banner. The fix is to be deliberate about what you switch on, and then to be honest about whether a banner is actually required of you.
Google Analytics is the default choice for most small businesses, and it is a reasonable one — it is free, it is thorough, and the property can be held in your own name. What causes trouble is turning on everything it offers. The advertising features, remarketing signals, and cross-site measurement are what turn a measurement tool into an ad-targeting tool, and they are off by default for a reason. A marketing site with informational pages and a contact form does not need any of them.
- Leave advertising features and remarketing signals switched off
- Don't connect an ad account you aren't running ads through
- Keep data retention short — you are reading trends, not building profiles
- Anonymize where the tool offers it, and don't push personal data into events
Configured that way you still get pageviews, referrers, traffic sources, and which pages people actually read. You just aren't following anyone around the internet — which most small businesses were never trying to do anyway.
What removing the banner does
When the banner goes away:
- Visitors land directly on your content. No popup. No friction.
- Mobile users don't have to fight with a tiny modal that takes up half the screen.
- First impressions are about your business, not about lawyers.
- Bounce rates drop, time-on-page rises, conversion improves.
For most small businesses we've worked with, removing the cookie banner improved conversion by 5 to 15 percent. That's real money.
How we handle it
Every JoeHandlesIt site gets a Google Analytics property created in your name, configured conservatively — measurement on, advertising and remarketing features off. You get your visitor numbers, and the property and its history stay yours if you ever leave. We don't bolt a consent banner onto a US small-business site by reflex, because for most of them it isn't required and it costs real conversions.
The honest caveat: whether *you* need a banner depends on where your customers are and what you switch on. If you sell into the EU or UK, that is a question for a lawyer, not for your web guy. What we can tell you is that adding one you don't need is not the safe choice — it is just a quieter way to lose visitors.
Curious what your traffic looks like without the banner getting in the way? Get in touch — we'll set you up.