We can't track anything before the visitor accepts in Europe.
Functional cookies are oke though but when you have like reCaptcha, Facebook pixel, Google ads or Youtube embed you need disable it on default and have a cookie page which explains what cookies the site uses, and a privacy policy page which explains what personal information you "keep" and why..
cookie-consent-api looks very good!