It is illegal in Europe as GDPR doesn’t talk about cookies but about collecting and trakcing user data and granting permission for it. So, if the user refuses the form and you still collect their browser fingerprint, then that’s illegal.