You know the drill. You click a link, the page hasn't even finished loading, and a gray box slides up from the bottom demanding you make a decision about "your privacy experience" before you're allowed to read a single word. Accept All is a big, friendly, blue button. Reject is a gray link in 10pt font tucked into a corner, if it exists at all.
Multiply that by every site you visit in a day and you've basically got a part-time job clicking "no" to strangers.
The good news: you don't have to do this by hand anymore. A handful of free Chrome extensions exist specifically to click "reject" for you, before the banner even finishes rendering. Here's an honest rundown of the ones worth knowing about, GetPawsOff included, since we built one and would rather tell you where it fits than pretend it's the only option.
1. Consent-O-Matic
The elder statesman of this space. Built by researchers at Aarhus University, open source, free, and it works across Chrome, Firefox, and Safari. Its rule set covers over 200 named consent management platforms (the software vendors, like OneTrust or UserCentrics, that build banners for websites), and it walks through every toggle, not just the top-level buttons. If a site's banner buries "reject" three menus deep, Consent-O-Matic will still find it.
- Good for: the most proven, cross-browser option, with years of real usage behind it.
- Heads up: it's a single-purpose tool, cookie banners only, nothing else.
2. Ghostery
Not a pure cookie-banner tool, it's a full suite: tracker blocking, ad blocking, and automatic cookie consent rejection bundled together. Ghostery dropped its account requirement in late 2025, which was a genuinely good move for a privacy tool.
- Good for: one extension that also handles ad and tracker blocking, not just banners.
- Heads up: heavier than a single-purpose tool, if all you want is banner rejection, you're carrying extra weight.
3. Universal Cookie Rejector, Cookie Decliner, and Reject Cookies
A cluster of smaller, single-purpose extensions that do roughly what the name says: click "reject," "decline," or "necessary only" wherever they can find it.
- Good for: something lightweight that does exactly one job.
- Heads up: less battle-tested than the two above, check the reviews and last-updated date before picking one.
4. I Don't Care About Cookies
Different approach worth knowing about: instead of clicking reject, it hides or auto-dismisses the banner entirely. The popup disappears, which feels like the same result, but the site may quietly treat that as acceptance since nothing was actually declined.
- Good for: people who just want the popup gone and don't care which cookies get set.
- Heads up: if your goal is actually rejecting tracking, not just clearing your screen, this isn't that.
5. GetPawsOff
Ours. It auto-rejects banners the same way Consent-O-Matic does: rule-based, matching known consent platforms, and piercing shadow DOM and iframes, which is where banners tend to hide their real reject button specifically to make automation harder. In plain terms, a lot of banners aren't simple HTML buttons sitting on the page, they're nested inside a shadow root (a sealed-off chunk of DOM the page can't easily style around) or loaded in a separate iframe from a different domain entirely. A script that only looks at the visible page misses both. GetPawsOff's rule engine specifically walks into those layers to find the actual reject control, not just whatever's sitting in the light DOM.
On top of that, it's bundled with a network-level tracker blocklist and a Terms of Service scanner, all running locally with nothing sent off your device. No account, because we don't have a server to put one on.
- Good for: one extension covering banners, trackers, and ToS scanning, fully local by design.
- Heads up: it's early, version 0.1.0, tested against a solid set of common consent platforms but not against every banner on the internet yet, and Chrome-only for now.
6. uBlock Origin (Lite)
Worth a mention even though it's not built for cookie banners specifically: it's the default answer for ad and tracker blocking, and pairs fine with any of the tools above. The Manifest V3 "Lite" version trades some of the original's flexibility for Chrome's new declarative rules model, which is a real limitation to know about if you were used to the full version.
- Good for: general ad/tracker blocking alongside a dedicated banner tool.
- Heads up: doesn't touch cookie banners at all, it's solving a different problem.
Who's actually collecting what
This is the part most roundups skip, and it's the part that actually matters for a tool you're trusting with every page you visit.
Consent-O-Matic is a university research project (built by CAVI, at Aarhus University), not a company. It phones home for rule updates and, only if you opt in, an anonymized broken-site report. No accounts, nothing to sell, and nobody to acquire it, since it isn't a business.
Ghostery has a real history worth knowing, not hiding: in its early Evidon/GhostRank era, it ran an opt-in data-sharing model that damaged a lot of user trust at the time. Since then it's been rebuilt as an independent company, dropped user accounts entirely in October 2025, and its current privacy policy states it doesn't collect personally identifiable information, doesn't require a name or email, and doesn't sell data to third parties. It does send a small daily non-personal "is the extension healthy" ping, and contributes anonymized, aggregate tracker data to WhoTracks.me, a public research project, not a data broker. The history's real, but so is the current policy, both are worth knowing.
Universal Cookie Rejector, Cookie Decliner, and Reject Cookies are smaller and less independently scrutinized than the tools above. No public scandal that we could find, but also a lot less audit history to point to. Read their actual Chrome Web Store data-disclosure section yourself before installing, don't take a roundup's word for it, ours included.
I Don't Care About Cookies has a genuinely relevant ownership story: it was acquired by Avast (now part of Gen Digital) in 2022. The extension's own listing currently discloses no data collection beyond an optional page URL if you use its "report a broken banner" feature. Avast itself, though, was fined $16.5 million by the FTC in 2024 and permanently banned from selling browsing data for advertising, over its Jumpshot subsidiary selling detailed, re-identifiable browsing histories from 2014 to 2020. The extension didn't do that, its parent company did, and that's exactly why a chunk of its user base forked off to a community-maintained alternative called "I Still Don't Care About Cookies" after the acquisition. Worth knowing before you install either one.
uBlock Origin doesn't collect data, full stop, it's open source and maintained by one well-known developer. The real risk with it is impersonation: there's a documented history of fake copies using near-identical names showing up in the Chrome Web Store to ride on its reputation. Make sure the listing you install actually matches the official one.
Our own local point of view
We can't out-policy Ghostery here, their current policy is genuinely solid. Our angle is structural instead: there's nothing to collect in the first place. No account exists to create. No server exists to send analytics to, opt-in or otherwise. The one network call we make is a signed, read-only fetch for a rules update, verified against a pinned key before it's ever used, and it falls back to the bundled rules if that check fails. Sites are recorded locally as a one-way hash, never as a plaintext address. Nobody can acquire us and quietly change the policy later, because there's no company here to acquire. The tradeoff for being the newest name on this list is real, though: less history to trust, also less history to explain.
So which one should you actually install?
If you want the most battle-tested, cross-browser option: Consent-O-Matic. If you want cookie rejection bundled with a broader ad/tracker blocker: Ghostery. If you want something that's local-only by design and don't mind being an early user of a newer tool: give GetPawsOff a look. None of these are mutually exclusive with each other, they solve overlapping but slightly different problems, and running two isn't overkill.
The honest bottom line: the fact that you need a browser extension to defend yourself against a form that legally has to make "reject" as easy as "accept" is a little absurd. Until every site actually follows that rule, these extensions exist for a reason.
A few quick questions
- Do these extensions actually stop tracking, or just hide the banner?
- Depends on the tool. Reject-style extensions (Consent-O-Matic, Ghostery, GetPawsOff) click the real decline option, so the tracking that banner was asking permission for shouldn't fire. Hide-style tools just remove the popup and may leave the underlying choice as accepted by default.
- Will an extension like this ever break a website?
- Occasionally. Rule-based automation can misfire on a banner built in some unusual way. Look for a "pause on this site" option, every extension worth using here has one, so one bad interaction doesn't cost you the convenience everywhere else.
- Is it legal for a site to keep showing me the banner anyway?
- Generally, no, not under GDPR, which expects a rejection to be respected consistently rather than re-prompted every visit. Enforcement varies a lot in practice, which is exactly why automating your answer is more reliable than trusting every site to behave.