The production website should use only the storage necessary for core functionality, security, consent preferences and lawful analytics.
If analytics are added, non-essential tracking should be activated only in accordance with applicable consent requirements. Unnecessary advertising trackers and hidden third-party scripts should be avoided.
Where non-essential cookies are used, a clear consent and preference mechanism should be available to visitors.