3 ms·

I’m curious about the motivation behind the site’s cookie banner. The only button is “accept” for me on mobile. If I scrolled the site and didn’t close the bann

I’m curious about the motivation behind the site’s cookie banner. The only button is “accept” for me on mobile. If I scrolled the site and didn’t close the banner does it still log? It’s certainly not GPDR compliant.

justsomehnguy 4y ago
F12, Network: GET https://forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2 GET https://api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=22107538 GET https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=22107538&utk= GET https://js.hs-banner.com/v2/22107538/banner.js GET https://js.hs-scripts.com/22107538.js GET https://www.googletagmanager.com/gtm.js?id=GTM-KZQLQKG GET https://snap.licdn.com/li.lms-analytics/insight.min.js GET https://js.hs-analytics.net/analytics/1681998000000/22107538.js Only the last three were blocked by default Firefox anti-tracking protection GET https://cdn.jsdelivr.net/npm/@finsweet/cookie-consent@1/fs-cc.js ETag W/"6e44-6QFWM2OT7puhIxEFAaT+kz8i7w4" NEL {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Report-To {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gtW7D1wJQ0gDhimitsu3oCKg5LuvTf8M%3D"}],"group":"cf-nel","max_age":604800} Is NEL GDPR compliant? And some useless trivia, if you visit Wordpress.com site by the IP (192.0.78.144, 192.0.78.228) you would get the response: GET http://192.0.78.144/ Status 302 Found Location http://wordpress.com/typo/?subdomain=192
thomond 4y ago
Seems they've changed it? as I'm getting a banner with "decline"
throwaway67743 4y ago
None of them are, but yes the accept only ones are definitely a violation - not because of the lack of reject but because they don't indicate whether cookies are set or not if you ignore it, regulation requires the user be informed so that falls foul in the spirit of the law which IMO is the same thing as the letter but the EU don't care anyway really, like most stuff it's fire and forget
Gigachad 4y ago
Sort of a tangent, but I think it's amusing how often HN goes on about how the laws are too complex but the situation is something like EU: Stop abusing the users Tech company: But I want to continue abusing the users, how do I do that while still being compliant?? This is so complex.
kiwijamo 4y ago
I stopped reading this article because of this.

justsomehnguy 4y ago

F12, Network: GET https://forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=2 GET https://api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=22107538 GET https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=22107538&utk= GET https://js.hs-banner.com/v2/22107538/banner.js GET https://js.hs-scripts.com/22107538.js GET https://www.googletagmanager.com/gtm.js?id=GTM-KZQLQKG GET https://snap.licdn.com/li.lms-analytics/insight.min.js GET https://js.hs-analytics.net/analytics/1681998000000/22107538.js Only the last three were blocked by default Firefox anti-tracking protection GET https://cdn.jsdelivr.net/npm/@finsweet/cookie-consent@1/fs-cc.js ETag W/"6e44-6QFWM2OT7puhIxEFAaT+kz8i7w4" NEL {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Report-To {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gtW7D1wJQ0gDhimitsu3oCKg5LuvTf8M%3D"}],"group":"cf-nel","max_age":604800} Is NEL GDPR compliant? And some useless trivia, if you visit Wordpress.com site by the IP (192.0.78.144, 192.0.78.228) you would get the response: GET http://192.0.78.144/ Status 302 Found Location http://wordpress.com/typo/?subdomain=192

thomond 4y ago

Seems they've changed it? as I'm getting a banner with "decline"

throwaway67743 4y ago

None of them are, but yes the accept only ones are definitely a violation - not because of the lack of reject but because they don't indicate whether cookies are set or not if you ignore it, regulation requires the user be informed so that falls foul in the spirit of the law which IMO is the same thing as the letter but the EU don't care anyway really, like most stuff it's fire and forget

Gigachad 4y ago

Sort of a tangent, but I think it's amusing how often HN goes on about how the laws are too complex but the situation is something like EU: Stop abusing the users Tech company: But I want to continue abusing the users, how do I do that while still being compliant?? This is so complex.

kiwijamo 4y ago

I stopped reading this article because of this.