The Pop-Up Before the Purpose: A Cookie Banner Audit for UK Charities
Photo: Dennis Sylvester Hurd, Public domain, via Wikimedia Commons
There is a particular kind of disappointment in clicking a charity link — maybe from a search result, maybe from a friend's message — and landing not on a warm sentence about what you do, but on a grey panel asking whether you accept 147 partners. The mission is somewhere behind it. The person you were trying to reach is now doing admin.
Cookie banners are usually treated as a legal afterthought: something the web developer installs, the trustee board never sees, and everyone quietly resents. But for a charity, that panel is often the first real interaction someone has with your brand. It is also the first test of whether your organisation respects people when they are distracted, anxious, using a shared phone, or relying on a screen reader. That makes it purposeful design territory.
The first thing they meet is still a greeting
We talk a lot in this sector about welcome — the tone of a thank-you email, the layout of a waiting room, the first hour of a volunteer shift. A cookie banner belongs in that same conversation. It is not a compliance tax. It is a greeting with a checkbox.
If the banner shouts, blocks the page, hides the close button, or makes the easiest path the one that hands over more data, people learn something about you before they have read a single line of your story. They learn whether you are on their side. For a domestic abuse charity, a mental health service, or a food bank, that lesson matters more than most. Someone may be browsing on a device that is not theirs. They may not want their visit remembered. They may simply be too tired to fight a preferences maze.
Consent, done properly, is not about getting the maximum number of ticks. It is about making a clear, fair offer and being genuinely fine with no.
Reject-all parity is not a technical nicety
The UK regulator's position is not mysterious: rejecting cookies should be as easy as accepting them. In practice, many charity sites still offer a bright 'Accept all' button and a pale 'Reject all' link tucked into a preferences panel. Sometimes the reject option appears only after scrolling. Sometimes it is phrased as 'Manage choices' while accept gets the plain-English verb.
That asymmetry is a dark pattern, even when nobody intended harm. It treats refusal as a difficulty to be overcome rather than a decision to be respected. For charities, the reputational cost is worse than for most brands. You are asking people to trust you with stories about their lives. You cannot begin that relationship by making the polite option hard to find.
A simple audit question: on a phone, in under five seconds, can someone find a control that rejects non-essential cookies without opening a second screen? If not, the banner is not neutral. It is steering.
Plain language beats legal language
Many banners read like they were written by a committee hiding from a regulator. 'We and our partners store and/or access information on a device...' is not consent; it is a fog. People cannot agree to something they do not understand, and they should not have to become amateur data-protection experts to visit a charity website.
Try writing the banner as you would explain it to a volunteer: 'We use essential cookies to make the site work. With your permission, we would also like to use analytics cookies to understand which pages are useful. You can say no.' That is not dumbing down. It is being honest.
Be careful with 'legitimate interest', too. It is a lawful basis, not a magic phrase that makes a complicated advertising setup acceptable by default. If your banner mentions dozens of partners, ask whether a small UK charity genuinely needs that arrangement. Often the answer is no. Fewer vendors make for a clearer banner, a faster site and a more credible promise.
Accessibility is part of consent
A banner that cannot be used by disabled supporters is not a welcome. Check the basics: keyboard focus must move into the banner and back out again without trapping anyone. Buttons need visible focus states. Tap targets need to be large enough on a phone. Text needs to meet contrast requirements and survive zoom. The close control should have an accessible name, not just an 'x' that screen readers announce as 'times'.
Avoid relying on colour alone to show which options are on. Make sure preference toggles are properly labelled. Test with a screen reader, not just a browser plugin. If your site uses animations to slide the banner in, respect reduced-motion settings. None of this is exotic. It is the same care you would put into a printed leaflet, applied to the screen.
And remember that consent must be reversible. If someone says no, do not ask again on every page. If they change their mind, make it easy to update. A small 'Cookie settings' link in the footer is a quiet act of respect.
The quiet dark patterns to weed out
Some of the worst banner behaviour is not dramatic. It is the pre-ticked box for 'analytics partners'. It is the banner that reappears every visit because the site does not remember a refusal. It is the 'Close' button that secretly means accept. It is copy that says 'We value your privacy' while offering no reject option on the first screen. It is a preference centre with 300 toggles, designed to exhaust you into acceptance.
These patterns are common because they work. But charities are not obliged to copy the commercial web. You can choose a simpler model: essential cookies only by default, one clear ask for analytics, a genuine reject button, and no advertising trackers unless there is a specific, explained reason. That is better for trust and usually better for page speed.
A small audit you can run this week
Open your site on a phone and on a laptop. Ask a colleague who has not seen the banner to reject all cookies while you time them. Then ask someone who uses a screen reader or keyboard navigation to try the same. Look at the language: is it plain, honest and short? Check the buttons: is reject as prominent as accept? Check the footer: can preferences be changed later? Check the vendor list: could it be shorter?
Finally, read the banner as if you were a supporter in a hurry. Does it feel like a door being held open, or a form being pushed under your nose? The answer is your brand, whether you planned it or not.
Consent is not the most glamorous part of purpose-led design. But it is one of the most honest. Get it right and the first thing people meet is not a barrier. It is a small, quiet sign that you thought about them.
