Privacy regulations require consent to use tracking “cookies,” but how consumers respond depends on the choice architecture of notifications. Most currently “accept all” or incorrectly assume that dismissing a notice rejects all. Interfaces that clearly display all options or a universal browser setting that applies across websites maximize consumer welfare.