undefined | Better HN

story

0 pointsatoav6y ago0 comments

Important point: GDPR allows you to use strictly necessary cookies without asking for consent.

So if you hate to put cookie banners onto a site, just stick with storing only strictly necessary cookies without data that identifies your users and you are fine.

The problem is, many people don’t even know what cookies their own site stores with their users and they store a ton of tracking cookies on their user’s devices.

0 comments

p1necone6y ago

Isn't the whole point of cookies to identify users (for session persistence and the like, not just ads)? If you're not identifying users what are you achieving?

atoavOP6y ago

For some sites it could be enough to store the state of the site (e.g. display settings, language, etc) instead of a profile.

When I visit a random wordpress blog I shouldn’t need any cookie from them — why would I?

When I visit an online shop it should be my choice if they remember me (which is precisely what the GDPR demands). This could be a little toggle switch labled “Remember me” that is off by default and that would be it.

But people seem to prefer forcing their cookies onto users.

arkh6y ago

Storing the language they want to use or other configuration.

frabcus6y ago

Some sites store local settings in cookies, that the user has explicitly set.

j / k navigate · click thread line to collapse