GitHub’s approach is really dubious and probably violates GDPR as well. They “only use necessary cookies” but then do (unnecessary) analytics on those necessary

GitHub’s approach is really dubious and probably violates GDPR as well. They “only use necessary cookies” but then do (unnecessary) analytics on those necessary cookies. But doing the unnecessary part still requires explicit consent. Discussion of this point at the time: https://news.ycombinator.com/item?id=25457903 https://news.ycombinator.com/item?id=25457903