They could use local storage? As local storage isn't sent to the server, the server will not know whether the user opted out. (User opt in will be a cookie still.)
Alternatively, the legal definition of tracking cookie can differ from the technical definition of cookie. It wouldn't be the first time...!
Alternatively, the legal definition of tracking cookie can differ from the technical definition of cookie. It wouldn't be the first time...!