3 ms·
> the local South African equivalent law (POPI) is more about data processing than cookies. Plenty of sites have not updated their cookie UX for the newer regul
by Nextgrid 4y ago
> the local South African equivalent law (POPI) is more about data processing than cookies. Plenty of sites have not updated their cookie UX for the newer regulations.
The GDPR is exactly the same. Even the ePrivacy Directive (the so-called "cookie law") actually covers more than just cookies - any method of storage in a user's terminal (whether browser local storage, or an app's own database) is also in scope.
- happymellon 4y agoIndeed, and you can also use cookies without requesting permission.
- colejohnson66 4y agoFor example, a login cookie is “essential” and does not require consent
- someweirdperson 4y agoBut don't start that php session (which sets the session cookie) before the user sends login credentials.
- happymellon 4y agoYou are allowed a session cookie if it is for the operation of a website. You don't need to ask permission to store a shopping cart or anything like that as a cookie.
- someweirdperson 4y agoI agree, it's not necessarily only login credentials, but could be a shopping cart. However, no shopping cart is needed until the user adds an item to it. Watching the shopping window doesn't need a cookie. The typical practice seems to be to set a session-cookie unconditionally, to be able to store user-related data within that session, even if the user has not provided any such information.
- happymellon 4y agoAre you using that cookie for tracking or analytics? If not then that's fine.