The law is only about tracking cookies not all cookies.