01Principle
No Consent - No marketing/analytics scripts (except strictly necessary). Opting out should be as easy as consenting.
02Banner UX
Short text, categories of cookies, link to the policy. Do not darken the entire site with an aggressive wall without an alternative.
03Machinery
Tag Manager with terms of consent, documentation of data processors, regular tag audit.