3 ms·

No. The so called "cookie law" is actually about personal data and doesn't even mention cookies. Using local storage won't help. Some cookie usage is exempt fro

No. The so called "cookie law" is actually about personal data and doesn't even mention cookies. Using local storage won't help. Some cookie usage is exempt from the notification. The best way to avoid cookie warnings is to not do anything that requires cookie warnings. "The ePrivacy directive – more specifically Article 5(3) – requires prior informed consent for storage or for access to information stored on a user's terminal equipment. In other words, you must ask users if they agree to most cookies and similar technologies (e.g. web beacons, Flash cookies, etc.) before the site starts to use them." http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2001:008:0001:0022:EN:PDF http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2... http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:32002L0058:EN:HTML http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:... http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm

nkkollaw 10y ago
I was afraid of that. Thanks for the links, I'll take a look. From your comment it seems as if any data stored on the server is fine? For instance, I could potentially track all info Google Analytics tracks, what the user clicks on, what torrent files they've downloaded recently etc., as long as I store that on a database instead of a cookie (not that I want to do it, just trying to understand)?
- pmontra 10y ago
  You could use a self hosted Piwik instead of Google Analytics http://piwik.org/blog/2014/10/cnil-recommends-piwik-analytics-tool-no-cookie-consent/ http://piwik.org/blog/2014/10/cnil-recommends-piwik-analytic... However be careful of what information you store about your users. The rule of thumb is not to store what you don't really need, and check the law for how much sensitive is what's left. You might have to notify privacy authorities of what you store, why and how you protect it. Your country of operation makes some difference. If you're in the USA check the new Privacy Shield http://europa.eu/rapid/press-release_IP-16-216_en.htm http://europa.eu/rapid/press-release_IP-16-216_en.htm
  - nkkollaw 10y ago
    Thanks. Yes, I'm not storing anything, it was just hypothetical to understand what the deal is :-)

nkkollaw 10y ago

I was afraid of that. Thanks for the links, I'll take a look. From your comment it seems as if any data stored on the server is fine? For instance, I could potentially track all info Google Analytics tracks, what the user clicks on, what torrent files they've downloaded recently etc., as long as I store that on a database instead of a cookie (not that I want to do it, just trying to understand)?

pmontra 10y ago
You could use a self hosted Piwik instead of Google Analytics http://piwik.org/blog/2014/10/cnil-recommends-piwik-analytics-tool-no-cookie-consent/ http://piwik.org/blog/2014/10/cnil-recommends-piwik-analytic... However be careful of what information you store about your users. The rule of thumb is not to store what you don't really need, and check the law for how much sensitive is what's left. You might have to notify privacy authorities of what you store, why and how you protect it. Your country of operation makes some difference. If you're in the USA check the new Privacy Shield http://europa.eu/rapid/press-release_IP-16-216_en.htm http://europa.eu/rapid/press-release_IP-16-216_en.htm
- nkkollaw 10y ago
  Thanks. Yes, I'm not storing anything, it was just hypothetical to understand what the deal is :-)