which I believe on many sites means you accept all
apparently that depends on where you are
Opt-in consent is the standard under GDPR — implied consent is not valid
You must block non-essential cookies before consent — anything else is non-compliant
Non-essential cookies are blocked until the user gives consent.
"Opt-out consent" model is more common in regions with less stringent data privacy regulations, such as under the California Consumer Privacy Act (CCPA).