Worth knowing cookies are a special case and are covered under the ePrivacy directive, which is distinct from the wider GDPR legislation and specifically deals with storing tracking information in a user's browser.