Hacker News Reader

My understanding was that you need consent before storing or accessing information on user's devices.

No, Reubensson is correct. The rules for what is essential are generally fairly strict, but only non-essential needs consent.