Ah, the sweet aroma of cookies — not the kind that crumble in your mouth, but the ones that stick around in your browser, gathering data crumbs faster than you can say ‘GDPR.’ In a move that is essentially the Internet equivalent of swatting your hand away from the cookie jar, the French data protection authority has decided to spank Google and Shein with a hefty fine, reminding them that cookies aren’t meant to be taken without asking. Isn’t consent the new chic trend?

In an ironic twist, the fines were as eye-popping as the pop-up consent windows they’re supposed to adhere to: $379 million for Google, as if they just lost some petty cash in the couch cushions, and $175 million for Shein, probably hoping people would just get distracted by their 80%-off flash sale banners. Apparently, Google believed that ‘Don’t be evil’ included an asterisk that read ‘*unless it’s about cookies.’

Meanwhile, Shein, the fast-fashion giant, quickly updated its systems and probably issued a statement along the lines of ‘Oops, our bad’, while simultaneously launching a new line of ‘Privacy Chic’ trousers that come with extra pockets for holding all those regulations. So next time you see a pop-up asking for cookie consent, remember: every click could save a tech giant from having to trade in their yachts for slightly less obscenely luxurious yachts.