4 ms·
I was under the impression that for something like a session token stored in a first-party cookie you don't need consent. The second paragraph refers to both GD
by jamil7 5y ago
I was under the impression that for something like a session token stored in a first-party cookie you don't need consent. The second paragraph refers to both GDPR and ePrivacy directive.
> Strictly necessary cookies — These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site. Cookies that allow web shops to hold your items in your cart while you are shopping online are an example of strictly necessary cookies. These cookies will generally be first-party session cookies. While it is not required to obtain consent for these cookies, what they do and why they are necessary should be explained to the user. [1]
> Receive users’ consent before you use any cookies except strictly necessary cookies. [1]
[1] https://gdpr.eu/cookies/ https://gdpr.eu/cookies/
- jefftk 5y agoIt depends on what you're doing with the session cookie. If it is just for holding shopping cart items or tracking whether you are logged in, I agree with you. But there are many first-party things sites want to do which are probably not "strictly necessary".