> Or maybe they want to persist session information?

That’s specifically exempt from the cookie law: Any technical cookie – session information, config options, etc – is allowed without any request.

The Cookie law only requires opt-in for tracking. Such as Google Analytics.