The Most-Read Paragraph on Your Website Is a Cookie Banner You Wrote in a Hurry
There's a piece of copy on your website with a hundred per cent read rate and roughly zero per cent of your editorial attention. It loads before your headline. It sits on top of your hero image. It is, for a second or two, the only thing a new visitor can look at.
And it was almost certainly written by whoever had the keys to the consent management platform at ten to five on a Friday.
We spend weeks sharpening a homepage and then let the first sentence a stranger reads be "We value your privacy." That's a strange trade. Let's fix it.
Read rate of one hundred per cent, interest level of nil
Nobody reads a cookie banner for pleasure. They read it to find the exit. That's precisely why it matters: the visitor is scanning, judgemental, and slightly irritated, and your banner is the first real voice they hear from the brand.
Get it right and you sound straightforward. Get it wrong and you sound like every other organisation that's ever pretended a legal obligation was a favour. There's no neutral option here. A banner written badly isn't invisible; it's a first impression you didn't proofread.
"We value your privacy" is a tell, not a statement
It's a claim with nothing behind it. Nobody has ever valued privacy less conspicuously than a company that needs four hundred vendors to explain itself.
The phrase does a specific job: it signals we know this is annoying, please forgive us. But the visitor hasn't asked for forgiveness. They've asked what you're doing with their data and whether they can say no. Answer that, and you don't need the apology.
The phrases worth binning this afternoon
- "We value your privacy." A slogan where a sentence should be.
- "We and our partners." Which partners? How many? Say the number. If it's genuinely too many to say, that's information too.
- "By continuing to browse, you consent." Continuing to browse isn't consent under UK PECR, and saying it doesn't make it so. It just tells the visitor you'd rather they didn't notice.
- "Legitimate interest" dropped into a list of purposes with no explanation. If your audience needs a footnote to understand a checkbox, the checkbox is the problem.
- "Personalised experience." Means tracking. Say tracking.
- "Carefully selected third parties." Selected by whom, for what, and how carefully, exactly?
- "Manage preferences" used as a trapdoor into four hundred toggles, while "Accept all" is a fat green button and "Reject all" is grey eight-point text.
That last one isn't strictly a copy problem, but it's the copy's job to be honest about it. Unequal buttons make every friendly word above them read as spin.
What the regulator actually expects
Consent under UK GDPR and PECR has to be freely given, specific, informed and unambiguous. In practice that means: no pre-ticked boxes, no implied consent from continued browsing, choices separated out by purpose rather than bundled into one lump, and rejecting as easy as accepting. The ICO has spent the past couple of years making pointed examples of well-known UK websites, so this isn't a theoretical risk.
You don't need a lawyer to write clearer consent copy. You need to stop hiding behind the legal minimum and describe what's happening. That said, do run anything structural past whoever handles compliance — clearer words are not a substitute for a properly configured platform.
The squint test: is your banner helping or hiding?
Before you rewrite a single word, run three checks.
- The exit glance. Look at your banner for one second. Can you find "Reject all" as easily as "Accept all" — same size, same contrast, same screen? If not, the best copy in the world won't save it.
- The swap test. Replace your brand name with a competitor's. Does any sentence change? If not, it isn't copy; it's filler.
- The read-aloud test. Say it out loud to a colleague. If you'd wince doing that, rewrite it.
Before and after
Before:
We value your privacy. We and our carefully selected partners use cookies and similar technologies to personalise content and ads, measure performance and improve your experience. By continuing to browse, you consent to our use of cookies. [Accept all] [Manage preferences]
After:
We'd like to use cookies to see which pages people actually read, and to show you relevant ads on other sites. That means sharing some information about your visit with us and with seven advertising partners. You can say no — the site works perfectly well either way. [Accept all] [Reject all] [Choose what you're happy with]
Same length. One is a hedge. The other tells you what's happening and respects your answer.
Then fix the preference centre, where the real damage is done
This is where most UK sites lose the plot. The banner is honest enough, and then the visitor clicks through to a wall of jargon, numbered vendors and purposes with names like "Store and/or access information on a device."
Before: sixty toggles across four collapsible categories, plus a vendor list running to three figures.
After: three plain-English headings, each with a line on what it means and a line on what happens if you switch it off.
Keeping the site working — sign-in, basket, security. Always on. Seeing how people use the site — anonymised analytics. Switch off and we'll know less about what's confusing, but nothing breaks. Showing you ads elsewhere — sharing your visit with seven partners. Switch off and you'll see ads, just less relevant ones.
That last sentence is the honesty nobody writes. Refusing consent doesn't mean the ads vanish. Saying so costs you nothing and buys you credibility.
Don't forget the copy after the click
Everyone rewrites the banner and abandons the confirmation screen. Keep it human:
Done — we've switched off everything optional. You can change your mind any time in the footer.
One line. It closes the loop, and it's the last thing the visitor reads before they finally get to your homepage.
Why this belongs in your content plan
A consent banner is the only paragraph on your site that every visitor reads. It deserves a slot in your editorial calendar next to the sales page and the homepage. Not once, either — revisit it whenever your platform, your vendor list or your data practices change, because stale consent copy is worse than stale marketing copy. Marketing copy that overpromises is annoying. Consent copy that misdescribes what you do with someone's data is a different category of problem entirely.
Sharper words for sharper brands. That includes the small grey box at the top.
