必要技术 / Strictly necessary
会话、安全、负载均衡、语言和购物车等为用户明确请求的功能所必需时可启用，并限制在实现该功能的范围。
Session, security, load balancing, language and basket technologies may be used where strictly necessary for a user-requested function and are limited to that purpose.
分析、广告和第三方 / Analytics, advertising and third parties
非必要分析、个性化、广告或跨站跟踪默认关闭；仅在法律要求的地区取得具体、知情、可撤回的选择后启用。拒绝不得造成不必要的不利。
Non-essential analytics, personalisation, advertising or cross-site tracking remains off until a specific, informed and withdrawable choice is obtained where required. Refusal does not cause unnecessary disadvantage.
设置与撤回 / Controls
Cookie 设置入口应与接受入口同等易找；用户可按类别同意、拒绝或撤回。撤回不影响此前合法处理，但会停止后续非必要读写。
Cookie settings must be as easy to find as acceptance. Users can consent, refuse or withdraw by category. Withdrawal does not invalidate prior lawful processing but stops future non-essential access.
清单 / Register
Before launch, an automated scan must produce the actual cookie/storage register with name, provider, purpose, duration and category. Template entries do not replace a live scan.