Browser Monster

“Reject and pay” cookie banners: what they are and whether they’re allowed

“Consent or pay” banners let you refuse ad tracking only if you pay. They aren’t banned in the UK, but the ICO says the fee must be fair and the choice real. We found 17 such sites in the Index.

By the Browser Monster team · · 6 min read

The Browser Monster Index page for thesun.co.uk, graded F, flagging a “Pay to Reject” button on its cookie banner.

You open a news story and the cookie banner gives you two buttons: “Accept” or “Reject and pay”. There is no free way to say no. This is called consent or pay (or “pay or OK”), and it’s spreading across UK publishing. Here’s what it is, how common it is, what the regulators say and what you can do.

What “consent or pay” means

Most cookie banners let you refuse tracking for free. A consent-or-pay banner doesn’t. Your choices are to let the site and its advertising partners use cookies and similar technology to profile you, or to pay for a version that doesn’t. The paid version is often a subscription with fewer or no personalised ads, sometimes with other perks.

Publishers say it’s a fair trade: journalism costs money, and personalised ads pay more than ordinary ones. Critics say a choice between handing over your data and paying isn’t a free choice, especially when the “accept” button covers hundreds of companies.

How common is it?

17

of 138 checked UK sites offered a paid option instead of a free reject

14

of those 17 were news sites

983

ad partners: the most any of them asked visitors to accept

Browser Monster Index, sites checked 20–24 October 2026 from London. “Ad partners” are IAB TCF vendors listed in the banner.
The company list on thesun.co.uk’s Index page: Amazon Ads, Google, Permutive, Comscore, New Relic and Parse.ly loaded before any choice; Criteo, ID5 and Lotame after accepting.
On The Sun, six companies loaded before any choice was made, and 19 in total after accepting. See the full result.

These are the 17 sites. The ad-partner figure is how many advertising companies the banner asked you to accept; the last column is how many tracking companies we actually saw on the page after we accepted.

SiteButton wordingAd partners to acceptTracking companies seen
express.co.uk“Reject and Pay”98341
mirror.co.uk“Reject and Pay”97941
cityam.com“Reject & Pay £4”95237
birminghammail.co.uk“Reject and Pay”94244
dailyrecord.co.uk“Reject and Pay”94244
liverpoolecho.co.uk“Reject and Pay”94243
manchestereveningnews.co.uk“Reject and Pay”94242
chroniclelive.co.uk“Reject and Pay”94242
walesonline.co.uk“Reject and Pay”94241
gbnews.com“Pay to Reject”52936
goal.com“Reject & Pay”18138
scotsman.com“Reject & subscribe”18035
parkers.co.uk“Pay To Reject”16734
thesun.co.uk“Pay to Reject”16419
standard.co.uk“Reject & Pay”9935
bbcgoodfood.com“Reject & Pay”9230
independent.co.uk“Pay to remove ads”Not shown8
Browser Monster Index, October 2026. Button wording as it appeared on the banner.

Outside the Index, we saw the same model on The Guardian, whose banner on 24 October 2026 offered “Accept all” or “Reject all and subscribe to Guardian Ad-Lite for £5 per month”, and on Germany’s Der Spiegel, which offered “Consent and continue” or “Subscribe now”.

Is it allowed?

In the UK, consent or pay isn’t banned. In January 2025 the Information Commissioner’s Office published guidance for organisations using it. Consent still has to be freely given and informed, and the ICO said it would look at four things:

In the EU, the European Data Protection Board said in April 2024 (Opinion 08/2024) that a simple “consent or pay” choice will, in most cases, not give valid consent when it’s used by large online platforms. It said those platforms should also offer a free alternative without behavioural advertising. That opinion is about the biggest platforms; for ordinary publishers, national regulators decide case by case.

Our grade doesn’t decide the law

The Index takes points off when saying no costs money, because from a reader’s point of view there’s no free way to refuse. That’s a privacy score, not a legal ruling. See how we check.

What you can do

  1. Pay, if you value the site. Check what the subscription actually removes: some remove personalised ads, some remove all ads.
  2. Accept, then clean up. Your data is shared while you browse, but you can delete that site’s cookies afterwards. Browser Monster can clear cookies by site or by company in one click.
  3. Read the same story elsewhere. Many news stories are covered by sites that let you refuse for free. Check a site’s grade first on Check a site.
  4. Complain if the deal looks unfair. If a fee seems disproportionate or the options are presented unfairly, you can raise it with the ICO at ico.org.uk.

If you use Browser Monster’s auto-reject, it deliberately leaves these banners alone: it will never press a paid option for you, and it tells you the site wants payment to refuse.

Know what you’re agreeing to

Browser Monster shows how many companies a banner asked you to accept, which ones loaded, and lets you clear them afterwards. Everything stays on your device.

Sources

  1. Browser Monster Index: live data and dashboard · Browser Monster, October 2026
  2. Consent or pay: ICO guidance and cookie compliance plans · Press Gazette, 23 January 2025
  3. ICO takes action to tackle cookie compliance across the UK’s top 1,000 websites · Information Commissioner’s Office, 23 January 2025
  4. Opinion 08/2024 on valid consent in the context of consent or pay models implemented by large online platforms · European Data Protection Board, 17 April 2024
  5. Key points from EDPB Opinion 08/2024 on “consent or pay” models · Simmons & Simmons

More guides