Prior consent on personal data (GDPR)
This could be related to the "Guestbook" and requires a email to be used before use. As the email can be seen as
personal data for each user then under GDPR requirement a cookie policy or GDPR policy
may be required to inform the user to accept this before entering any information such as email, user name etc. So even though the "Guestbook" does not use or add any cookies it is the information being inserted that requires permission.
Note this is just my interpretation of what is required under GDPR about how sites gather information such as user name, email and how it is used, stored by the site owner.