undefined | Better HN

0 pointscodeflo4y ago0 comments

Yes, I’m specifically in fear, uncertainty and doubt. To be clear, I’m fully onboard with the intent of the GDPR, but I have no idea how to follow it. And “you’ll be okay, the fines are probably small” is exactly the kind if statement that causes anxiety.

I’ve recently tried to figure out if it’s okay to use something like Cloudflare Pages to host a blog. That’s not an esoteric question, but I was unable to get an answer. They’re not based in Europe, the log retention policy is a bit unclear, regulators seem to be disagreeing on whether even their CDN is okay (and Pages is built on top of the CDN). And in Germany, the real danger isn’t a regulator fining you, it’s a private lawyer sending you an “Abmahnung”. Which they will do for any trivial infraction, often using automated platforms.

0 comments

2 comments · 2 top-level

sdoering4y ago

Are you located in Germany? If so - welcome to the boat.

From experience I personally would not host on CF pages. But, depending on the content and intended audience CF pages could clearly be argued under legitimate interest. You would/should probably have a TIA in place and state that in the privacy part of the site.

I know people arguing legitimate interest when using Webflow. Also clearly PD being transmitted towards a non EU country there.

As said. Personally I would go with something like uberspace.de as I just like their offering and the fact that I always have a human replying and being helpful when something breaks because I fatfingered it.

cabraca4y ago

Yeah, Cloudflare Pages is out, same as Github/Gitlab Pages, Netlify and all the other free offerings Hosted by a US Company.

Social Login Buttons are probably a problem too, if they automatically redirect. Could be considered a transmission of IP.

Game Servers that connect to Steam on client connect are probably a problem too.

I like the idea behind GDPR but the implementation is a fucking shitshow.

j / k navigate · click thread line to collapse