Adapt our docs to 'type: express' being the default for cookie consent now

Author: cderv

docs/prerelease/1.9/_highlights.qmd

@@ -1,3 +1,5 @@
 Quarto 1.9 includes the following new features:
 
+- [Privacy-first cookie consent](/docs/websites/website-tools.qmd#cookie-consent): The default for cookie consent has changed to `type: express`, providing opt-in consent that blocks cookies until users explicitly agree. This privacy-conscious default is designed with modern privacy regulations in mind.
+
 - [`aria-label` for videos](/docs/authoring/videos.qmd#accessibility-label): Improve accessibility of embedded videos by providing custom descriptive labels for screen readers instead of the default "Video Player" label.

docs/websites/website-search.qmd

@@ -171,11 +171,11 @@ You can confirm that events are being properly sent to Algolia using the [Event
 
 #### Cookie Consent and User Tracking
 
-Algolia Insights uses user tokens to track click and conversion events. By default, Quarto uses a **privacy-first approach** that does not store cookies:
+Algolia Insights uses user tokens to track click and conversion events. Quarto uses a **privacy-first approach** for handling cookies:
 
-- **Default behavior (no cookies)**: A random session token is generated for each browser session. This allows tracking of search interactions during a single visit without storing persistent cookies. This default is compliant with privacy regulations like GDPR.
+- **Without cookie consent enabled**: A random session token is generated for each browser session. This allows tracking of search interactions during a single visit without storing persistent cookies. This privacy-first approach avoids persistent cookies entirely.
 
-- **Persistent tracking (with cookies)**: To track users across multiple sessions, you must enable [cookie consent](website-tools.qmd#cookie-consent). When cookie consent is enabled, Algolia will only use cookies after the user grants "tracking" consent:
+- **With cookie consent enabled**: When you enable [cookie consent](website-tools.qmd#cookie-consent), cookies are blocked by default until the user expressly grants consent. After the user grants "tracking" consent, Algolia will use cookies to maintain an anonymous user identifier across sessions:
 
 ``` yaml
 website:
@@ -190,10 +190,12 @@ website:
 
 With this configuration, the Algolia Insights API will use cookies to maintain an anonymous user identifier across sessions, but only after the user has explicitly granted consent.
 
-::: {.callout-note}
-## Privacy and Compliance
+::: {.callout-important}
+## Privacy Regulations
 
-The default session-only tracking provides meaningful analytics about search usage patterns while respecting user privacy. Enabling persistent cookie tracking may require compliance with privacy regulations in your jurisdiction, which is why Quarto requires explicit configuration of cookie consent.
+The default session-only tracking (without cookie consent) provides meaningful analytics about search usage patterns without using persistent cookies. When cookie consent is enabled, Quarto uses an opt-in approach (express consent) by default, blocking cookies until the user explicitly agrees.
+
+While these features are designed with privacy regulations in mind, website owners should consult with legal counsel to ensure their specific implementation meets applicable privacy laws and regulations in their jurisdiction.
 :::
 
 ### Advanced Configuration

docs/websites/website-tools.qmd

@@ -272,9 +272,9 @@ You can further customize the appearance and behavior of the consent using the f
 +==============+======================================================================================================================================================================================+
 | `type`       | The type of consent that should be requested, using one of these two values:                                                                                                         |
 |              |                                                                                                                                                                                      |
-|              | **implied -** (default) This will notify the user that the site uses cookies and permit them to change preferences, but not block cookies unless the user changes their preferences. |
+|              | **express -** (default) This will block cookies until the user expressly agrees to allow them (or continue blocking them if the user doesn't agree).                                 |
 |              |                                                                                                                                                                                      |
-|              | **express -** This will block cookies until the user expressly agrees to allow them (or continue blocking them if the user doesn't agree).                                           |
+|              | **implied -** This will notify the user that the site uses cookies and permit them to change preferences, but not block cookies unless the user changes their preferences.           |
 +--------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
 | `style`      | The style of the consent banner that is displayed:                                                                                                                                   |
 |              |                                                                                                                                                                                      |
@@ -321,7 +321,7 @@ website:
       analytics-events: true
 ```
 
-Note that with cookie consent enabled, both Google Analytics and Algolia search analytics will only use cookies after the user has granted "tracking" consent. Without cookie consent enabled, Algolia will use session-only tracking without cookies. See [Algolia Insights](/docs/websites/website-search.qmd#algolia-insights) for more details.
+Note that with cookie consent enabled (which uses opt-in "express" consent by default), both Google Analytics and Algolia search analytics will only use cookies after the user has granted "tracking" consent. Without cookie consent enabled, Algolia will use session-only tracking without cookies. See [Algolia Insights](/docs/websites/website-search.qmd#algolia-insights) for more details.
 
 ### Cookie Preferences