Everything I Learned About Human Attention Spans From Watching People Click "Accept All"

"Accept All" is clicked in an average of 390 milliseconds after the banner appears. That is faster than the human visual cortex can fully process text. Users are not reading the cookie banner before accepting it. They are removing it. The distinction matters enormously and is never discussed in the analytics meeting where someone reports a 94% consent rate.

The Accept Button Is Excellent Software

Stripped of the ethical dimension, the Accept All button is a masterpiece of UX design. It is large. It is coloured to stand out. It is positioned where the eye lands. It is labelled with an action word. It eliminates the thing obstructing the task the user actually came to complete. By every conventional metric of call-to-action design, it is exceptional.

The Accept button is so good that users who have just finished complaining loudly about cookie banners, on the record, in focus groups, will still click Accept All when presented with one 15 minutes later. Not because they changed their minds. Because the button removed the obstacle. The obstacle was the banner. The banner disappeared. The job was done.

What 390 Milliseconds Tells Us

The 390ms figure tells us that the decision to accept cookies is not a decision. It is a reflex. The banner triggers a pattern the brain has learned: obstacle appears, obstacle button appears, click button, obstacle removed. The word "cookies" in the banner is approximately as relevant to the cognitive process as the serif font choice or the animation timing. It is background information. The action is foreground.

This is, depending on your perspective, either a triumph of friction reduction or one of the most successful mass deceptions in the history of interface design. We lean toward the second but understand the first.

"The fastest way to make someone consent to something is to make the alternative slightly more inconvenient than the thing they were trying to do." — Unattributed, from a CRO conference in 2021 that we are sure happened.

The Attention Economy, Measured In Banners

If you click Accept All on an average of 3 cookie banners per day and have been online since the GDPR era (2018), you have now accepted approximately 9,000 cookie consent agreements without reading them. Each agreement potentially authorises data processing from dozens of third parties. You have, in aggregate, consented to a lot. The total reading time required to actually read those agreements: approximately 14,000 hours.

The average person reads for approximately 200 hours per year. Which means properly reading the cookie banners you have clicked through would have taken 70 years. You would have had to start reading them in 1956 to finish by now. This is frequently cited as evidence that the consent model is broken. It is rarely cited as evidence that perhaps 9,000 separate consent decisions per user was too many consent decisions, but that is also a viable conclusion.

The Tribunal's Findings

The Non-Consensual Cookie Bandit has conducted extensive internal research into the cookie acceptance phenomenon. We found that 100% of our users click Accept All. We found that 97% of them, when asked directly, said they "care about their privacy." We found that the gap between stated preference and behavioural preference is precisely the size of a well-designed blue button.

We do not judge this. We are the Bandit. We simply note it, document it, file it, and continue operating.