3 ms·

Save yourself two minutes of reading: > Want to know why I don’t have a cookie notice on this site? It’s because I don’t track you. Obviously doesn’t work for

by oefrha 7y ago

Save yourself two minutes of reading: > Want to know why I don’t have a cookie notice on this site? It’s because I don’t track you. Obviously doesn’t work for any website that requires creating an account and logging in. Thanks everyone for upvoting a nothingburger to the top of front page. Edit: Okay, I didn’t know cookie notice isn’t required for login cookies (apparently I never used a cookie banner on my sites anyway, cookie law be damned). Anyway, the nothingburger point still stands.

ceejayoz 7y ago
Functionality cookies of that nature don’t require these disclosures.
chmod775 7y ago
> Obviously doesn’t work for any website that requires creating an account and logging in. You don't need explicit consent to provide functionality. When an user logs in, their consenting to storing cookies on their computer is implicit.
- jstrong 7y ago
  when a user logs in, it's consent when a user sends a http request to a remote server with a client that saves cookies on their behalf, it's not consent? not arguing with you, per se, I just don't understand how sending a request to someone else has somehow become "involuntary" under the law. the server didn't come looking for you, your program asked it to send you the cookie.
  - chmod775 7y ago
    One cookie is required to provide the functionality I asked for, the other isn't. When I say "GET /some-information-on-topic" I did not ask you to track me, I asked you for information on "topic". When I say "POST /login", I want you to log me in.
    - jstrong 7y ago
      right but the cookie request can just as easily be ignored if you'd like. there's no gun to your head to "take this cookie OR ELSE!" if you walk into the local deli and there's a sign-up sheet to receive updates about the store, is that coercion?
rusk 7y ago
> Obviously doesn’t work for any website that requires creating an account and logging in. Doesn't it? Once you're logged in, presumably because you've created the account you've consented to some kind of privacy policy? The point of the cookies notice is to let you know that the site tracks you even if you're just using it passively. Many people might not be aware of this; few outside of the types that frequent HN are aware of the scale of it. That's the point.
nebietoss 7y ago
You can track what is technically needed for the website to function (ie: login, etc). You only need to notify about "extras"
nottorp 7y ago
Tracking that is necessary for the functioning of the site (like, you know, login cookies that track logged in people) is explicitly allowed. Perhaps you people should read the GDPR instead of looking at alarmist reinterpretations?

by oefrha 7y ago

ceejayoz 7y ago

Functionality cookies of that nature don’t require these disclosures.

chmod775 7y ago

> Obviously doesn’t work for any website that requires creating an account and logging in. You don't need explicit consent to provide functionality. When an user logs in, their consenting to storing cookies on their computer is implicit.

jstrong 7y ago
when a user logs in, it's consent when a user sends a http request to a remote server with a client that saves cookies on their behalf, it's not consent? not arguing with you, per se, I just don't understand how sending a request to someone else has somehow become "involuntary" under the law. the server didn't come looking for you, your program asked it to send you the cookie.
- chmod775 7y ago
  One cookie is required to provide the functionality I asked for, the other isn't. When I say "GET /some-information-on-topic" I did not ask you to track me, I asked you for information on "topic". When I say "POST /login", I want you to log me in.
  - jstrong 7y ago
    right but the cookie request can just as easily be ignored if you'd like. there's no gun to your head to "take this cookie OR ELSE!" if you walk into the local deli and there's a sign-up sheet to receive updates about the store, is that coercion?

rusk 7y ago

> Obviously doesn’t work for any website that requires creating an account and logging in. Doesn't it? Once you're logged in, presumably because you've created the account you've consented to some kind of privacy policy? The point of the cookies notice is to let you know that the site tracks you even if you're just using it passively. Many people might not be aware of this; few outside of the types that frequent HN are aware of the scale of it. That's the point.

nebietoss 7y ago

You can track what is technically needed for the website to function (ie: login, etc). You only need to notify about "extras"

nottorp 7y ago

Tracking that is necessary for the functioning of the site (like, you know, login cookies that track logged in people) is explicitly allowed. Perhaps you people should read the GDPR instead of looking at alarmist reinterpretations?