Replying to @anvilwalrusden and @mariafarrell, @guardian
It's true that the ePD cookie consent rules are stricter than is sensible (and do close to nothing for privacy) but I'd be shocked if a regulator came after anyone for storing the consent preference of a logged in user.
♥ 2