4 ms·
What about a session cookie that is used for more than just authentication like for example tying browsing sessions on different devices by the same user togeth
by LunaSea 6y ago
What about a session cookie that is used for more than just authentication like for example tying browsing sessions on different devices by the same user together?
- Macha 6y agoIf it's only to provide the stated purpose of the site (think those "scan a QR code and approve this login on your other device" setups), it likely falls under the legitimate interest exception. If it's to provide cross device tracking for better advertising, then you need consent. Lawyers are unlikely to take kindly to arguments of the "Well technically the advertisments are an integral part of the site", that will surely be raised in response to this. This is why the law is not code and gets interpreted by judges.
- piva00 6y agoIs that information going to be shared with 3rd parties? Is this tracking solely for the use of the product or for profiling the user? Those are the concerns with GDPR, you can do whatever you want if you are explicit about it AND have consent of the user.