Ask properly. Keep the proof.
It asks the way the law where they are expects
Europe and the UK get an equal Accept and Reject side by side. California and the other opt-out states get a do-not-sell link. Everywhere else gets a plain notice. It works this out from where the visitor actually is, and never asks them.
It actually blocks things
Nothing optional runs until they answer. That is the part cheap banners quietly skip, and a banner that appears after the trackers have already fired is decoration.
Every answer is kept as proof
On screen and downloadable as a spreadsheet. That is the thing you produce if anybody ever asks, and it is the part most tools handle worst.
Nobody is named in it
Each record holds a one-way fingerprint, never a name, an email or an address. A consent log full of identities is itself a privacy problem.
They can change their mind
A small button stays on the page so a visitor can reopen their choices and withdraw as easily as they agreed.
The cookie check
Point it at a website and it names what is really running there, sorted into what is needed, what is watching and what is advertising.