If it has to be asked every time, then it could be easily classified as essential functionality and allowed. The rules are about sharing private / identifiable information, not about preventing client-side storage from working.