How to design ‘cookie consent’ fairly?