3 ms·

Instead of document.cookie consider document.localStorage since there’s verbiage around showing a notice on your site if you use cookies, etc, for tracking purp

Instead of document.cookie consider document.localStorage since there’s verbiage around showing a notice on your site if you use cookies, etc, for tracking purposes. At least with local storage, you aren’t using cookies :P

Tarq0n 1y ago
The law doesn't care whether it's a cookie or an equivalent.
- minitech 1y ago
  And this cookie isn’t for tracking purposes anyway, so doesn’t require a notice.
- dheera 1y ago
  The "law" only applies if you live in the EU anyway.
  - DocTomoe 1y ago
    See, this is where you are wrong. The law applies if you target people living in the EU (such as using one of the languages spoken within the EU. English applies thanks to Malta and Ireland. So does not explicitly removing tracking from EU IPs). Whether it is technically enforceable in your particular case may be the question. But historically, it has been enforced outside the EU. As you live in the Bay Area - the CCPA and the CPRA, which are similar in many ways and seem to require an opt-out mechanism (e.g. if you operate a commercial website with >100k devices accessing it during a year). Talk to a lawyer, don't take advice from strangers on the internet.
    - dheera 1y ago
      > The law applies if you target people living in the EU I disagree with this. Tencent WeChat targets the entire world, including people living in the EU. They do not follow GDPR. Likewise, Facebook targets people living everywhere, including in China. They do not follow Chinese laws. Hence, China sets up a firewall and blocks Facebook. EU can set up a firewall too if they don't like something. "Oh but EU doesn't do firewalls?" Not my problem. Tough luck. China, Iran, Turkey, Indonesia, all did it, you can too if you have beef with foreign websites. But no, I do not need to follow EU law just because EU users use my thing. It's on them to firewall it if they don't like my website. > CCPA and the CPRA This is fine. I live in California, I need to follow California law, and I can choose to live somewhere else if I don't like it. What I'm not okay with is some distant jurisdiction thinking they can make laws that I "need" to follow.
    - joquarky 1y ago
      I hate the GDPR popups more than the ads because they make no fucking sense. Why don't we have a browser flag that sends a request header telling the site our preference automatically so we can avoid these popups?
      - dheera 1y ago
        What's even worse is that I have my browser set to block cookies on ALL sites by default and only enable them for a handful of sites that I login to. This causes all the stupid GDPR popup sites to not "remember" my preferences because they ironically need to use a cookie to store the preference of declining cookies, so they appear again each time because my browser doesn't store that decline cookie between sessions.
account42 1y ago
How does this nonsense still get repeated in 2025?
- deleted 1y ago
  [deleted]
maurycyz 1y ago
Except it's not tracking. Remembering user preferences is the original goal of cookies, and doesn't come with any legal requirements. The law is (paraphrasing) "You must use cookies or similar to be evil without permission". Advertising companies decided that instead of not being evil, they'd annoy users into giving permission.

Tarq0n 1y ago

The law doesn't care whether it's a cookie or an equivalent.

minitech 1y ago
And this cookie isn’t for tracking purposes anyway, so doesn’t require a notice.
dheera 1y ago
The "law" only applies if you live in the EU anyway.
- DocTomoe 1y ago
  See, this is where you are wrong. The law applies if you target people living in the EU (such as using one of the languages spoken within the EU. English applies thanks to Malta and Ireland. So does not explicitly removing tracking from EU IPs). Whether it is technically enforceable in your particular case may be the question. But historically, it has been enforced outside the EU. As you live in the Bay Area - the CCPA and the CPRA, which are similar in many ways and seem to require an opt-out mechanism (e.g. if you operate a commercial website with >100k devices accessing it during a year). Talk to a lawyer, don't take advice from strangers on the internet.
  - dheera 1y ago
    > The law applies if you target people living in the EU I disagree with this. Tencent WeChat targets the entire world, including people living in the EU. They do not follow GDPR. Likewise, Facebook targets people living everywhere, including in China. They do not follow Chinese laws. Hence, China sets up a firewall and blocks Facebook. EU can set up a firewall too if they don't like something. "Oh but EU doesn't do firewalls?" Not my problem. Tough luck. China, Iran, Turkey, Indonesia, all did it, you can too if you have beef with foreign websites. But no, I do not need to follow EU law just because EU users use my thing. It's on them to firewall it if they don't like my website. > CCPA and the CPRA This is fine. I live in California, I need to follow California law, and I can choose to live somewhere else if I don't like it. What I'm not okay with is some distant jurisdiction thinking they can make laws that I "need" to follow.
  - joquarky 1y ago
    I hate the GDPR popups more than the ads because they make no fucking sense. Why don't we have a browser flag that sends a request header telling the site our preference automatically so we can avoid these popups?
    - dheera 1y ago
      What's even worse is that I have my browser set to block cookies on ALL sites by default and only enable them for a handful of sites that I login to. This causes all the stupid GDPR popup sites to not "remember" my preferences because they ironically need to use a cookie to store the preference of declining cookies, so they appear again each time because my browser doesn't store that decline cookie between sessions.

account42 1y ago

How does this nonsense still get repeated in 2025?

deleted 1y ago
[deleted]

maurycyz 1y ago

Except it's not tracking. Remembering user preferences is the original goal of cookies, and doesn't come with any legal requirements. The law is (paraphrasing) "You must use cookies or similar to be evil without permission". Advertising companies decided that instead of not being evil, they'd annoy users into giving permission.