Another web developer here, that is how the California and European rules are interpreted. If we’re acting in good faith we do not store anything.

Maybe you can find a way to argue user settings and session cookies don’t require consent, but I am not a lawyer and I err on the side that doesn’t put me out of business.