Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for the GDPR cookie consent popup confirmation/widget #191

Open
zshamrock opened this issue Oct 31, 2019 · 5 comments
Open

Add support for the GDPR cookie consent popup confirmation/widget #191

zshamrock opened this issue Oct 31, 2019 · 5 comments

Comments

@zshamrock
Copy link

There are multiple integrations available: https://cookie-script.com/demo.html, https://www.cookiehub.com/. Or custom solution can be build into the platform itself.

@lacarmen
Copy link
Member

lacarmen commented Nov 8, 2019

Looks like those two platforms just gives you a script to put on your page? Static sites usually don't make use of cookies so I'm not keen on providing support for this through Cryogen. Seems like it should be simple enough to add it to your templates though.

@zshamrock
Copy link
Author

But what about Google Analytics tracker, and Google Fonts, and other helper services which utilize the cookies and also collect the data about the user?

@lacarmen
Copy link
Member

Oh interesting - is the popup required for that as well? I'm not in the EU so not super familiar with GDPR.

I still think it would be simpler to just add the relevant code to your templates. :)

@holyjak
Copy link
Contributor

holyjak commented Dec 1, 2020

For context: Which cookies need this, see https://wikis.ec.europa.eu/display/WEBGUIDE/04.+Cookies => tracking cookies: yes, auth etc cookies no.

EU Data Protection Board guidelines as of 5/2020: https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_guidelines_202005_consent_en.pdf

@holyjak
Copy link
Contributor

holyjak commented Oct 5, 2021

I fully agree with Carmen that this does not belong in Cryogen proper. I also hope the popups are going to die soon / get much more limited in scope. I suspect that Google Analytics is indeed in scope of GDPR so we should warn the author about the need to do something about this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants