@fourwhitesocks Yes, that is a normal situation. If people never click “Agree” (to cookie consent), they can still surf your website. This is preferred, because most people don’t want to scare away visitors who wish to remain anonymous. Why? Maybe anonymous users will change their mind when they see your valuable content. Or maybe they don’t want to be tracked by cookies (like Google Analytics), but they still would want to fill out your newsletter sign-up form (which, for GDPR, should have it’s own consent checkbox too). And so on.
There’s no legal implied-consent (e.g. user keeps scrolling) for cookies that deal with PII (personal identifiable information). GDPR specifically needs there to be a hard consent (the user literally clicking “Agree”). Where implied consent is allowed, is for cookies that have no PII. No special awareness has to be made to the user in that case.
If you wanted to actually stop the user from seeing *anything* on your website before consenting to cookies, well I would say that’s a special use case. To do that you’d probably want to setup a global welcome page that catches all first-time visitors and makes them do something (ie consent to cookies) before revealing your content. If you are creating such a barrier, and so desperate to know who your users are (to get their IP address at least), then you may as well just have a user registration form like any membership area of a website, which would be outside the scope of cookie consent plugins.
Anyways, welcome to consent hell! Eventually leeching into all aspects of life.
“Hello strange-person-I’m-meeting-on-the-street-potential-business-partner-or-lover! Nice to meet you! Do you consent to me shaking your hand?”
or
“I’d like to remove my previously-agreed-to consent for having my hand shook. I changed my mind about it, even though the hand-shaking event already took place. See you in court.”
or
“I didn’t consent to myself over-feeding myself at dinner. See you/myself in court.”
At least all of the lawyers losing jobs to AI have some new lines of work ie GDPR consultants.