3 ms·
Is the PHPSESSION cookie valid for GDPR? Or should we replace it with a token?
by ffhhj 5y ago
Is the PHPSESSION cookie valid for GDPR? Or should we replace it with a token?
- M2Ys4U 5y agoIs it strictly necessary for the provision of your service? Then the ePrivacy Directive says that it's okay. Otherwise, you need consent.
- ratww 5y agoIf you're using it only to make your website work, then you don't need a cookie banner. However, if it's doing double-duty and is also being used to track users (or to speak technically: if it can be considered PII by GDPR), then you need consent before using it for the tracking part. GDPR doesn't apply for cookies, btw, it applies for any personal data. Someone above used "information stored using fridge magnets" as an example.