3 ms·
> We did all the tracking on the backend Just checking, you do know that still counts as tracking and may fall under GDPR rules? GDPR was never just about cook
by jarofgreen 4mo ago
> We did all the tracking on the backend
Just checking, you do know that still counts as tracking and may fall under GDPR rules? GDPR was never just about cookies.
- maccard 4mo agoI do but we shouldn’t be talking about cookies in our cookie banner then.
- crote 4mo agoThat's why the usual phrasing is some variation of "Are we allowed to track you? We use cookies for that". It was never about the cookies themselves. That just happened to be the most common form of tracking in use when the GDPR was originally written. Cookie-less tracking still requires a consent prompt, tracking-less cookies never required one.
- maccard 4mo agoYou’re conflating GDPR and the ePrivacy Directive. They _should_ work how people imagine they do. > it was never about the cookies themselves. The ePrivacy directive was about cookies. GDPR is about user consent and data handling - the cookie banner is from the ePrivacy directive. > Cookie-less tracking still requires a consent prompt, tracking-less cookies never required one. Where in the GDPR or ePrivacy directive does it say cookie less tracking requires a consent prompt? And on tracking-less cookies not requiring one - that’s my entire point.