

That’s also not entirely correct.
you’ve never had to ask for permission to store cookies that are required for your site to work
You don’t need to ask permission for cookies that are strictly necessary for your site to work. They can contain personally identifiable information (PII) but only to the extent that is strictly required for the functionality to work. If your “required” cookie does anything more than what is strictly necessary (such as collecting more PII than it needs or has built in tracking) you need to ask consent.
you have to ask for permission for third party trackers to store cookies when people use your site.
If you’re using something like on premise tracking, like Matomo, then you still have to ask permission. There are some exceptions like if you don’t use cookies and you don’t track PII.
And just for extra clarification, if you are collecting PII (for example into logs) you need to ask permission even when you’re not storing any cookies.
My bad. For some reason I associate all the consent pop-ups with GDPR as I don’t remember any pop-ups prior to GDPR.