Live data from Hacker News

No Cookie for You

github.blog

31–40 of 634 posts

Re: No Cookie for You

#31
I hate the standard wording on Cookie banners. Most of them should read:

"The site uses cookies. Actually it doesn't - you are not logged on and we don't need to maintain state. But our advertising partners, their partners, and their partner's partners all love to set tracking cookies. Click here to consent to three dozen cookies from around the globe."

Re: No Cookie for You

#33
post #3

A lot of people have the misconception that the EU cookie law applies to all cookies, but as the blog post correctly points out, that just isn't the case.

Also, it only applies in the EU. You don't need to display any banners outside the EU.

Not that I am pro-privacy invasion, I'm not, but I'm definitely anti-annoying-popups.

Re: No Cookie for You

#34
post #19

Can anyone familiar with the topic explain what distinguishes essential from non-essential cookies? GitHub gives the example of "those used by third-party analytics, tracking, and advertising services", but curious if the law defines some sort of bright line here.

Authentication and authorization cookies seem pretty essential for any website that has accounts. If you block those cookies the website stops working -- they're essential.

If you block ad networks and analytics the site functions just fine -- they're not essential.

Beyond that there's probably some sort of "need to know" test to prevent convoluted fake dependencies.

Re: No Cookie for You

#35
post #9

If they've gotten rid of 3rd party analytics, does this mean they're just using their own? Presumably session cookies count as "required", and could be used to track your actions at least on github.com.

What matters is the purposes that the cookies are used for, not how many there are or which service set it.

A session cookie that is also used for tracking would qualify as both a functional and a tracking cookie, and thus generally be illegal (since you can't consent to the tracking if it's under the threat of being unable to use the service).

Re: No Cookie for You

#36
post #24
post #3

A lot of people have the misconception that the EU cookie law applies to all cookies, but as the blog post correctly points out, that just isn't the case.

True. Also even if you do track your visitors you can use privacy friendly (and ideally selfhostable) Analytics like Plausible https://plausible.io/ so you won't need the banners either. Just don't include facebook like buttons or any of these widgets

I would like to add https://pirsch.io/ :)

Re: No Cookie for You

#37
post #14

I assume that means a lower ad revenue and lower quality analytics. I wager they did a study and found the benefits of removing the dialogs outweigh the costs. Cookie dialogs are indeed horrible and out of control. Good on them for making the jump. But I doubt many others can justify the cost associated with the change. We need a better solution that gives users choice but reduce the friction caused by annoying promp…

Github doesn't have any ads to begin with as far as I know? So there is no ad revenue lost.

Re: No Cookie for You

#38
post #24
post #3

A lot of people have the misconception that the EU cookie law applies to all cookies, but as the blog post correctly points out, that just isn't the case.

True. Also even if you do track your visitors you can use privacy friendly (and ideally selfhostable) Analytics like Plausible https://plausible.io/ so you won't need the banners either. Just don't include facebook like buttons or any of these widgets

Another solution is to do all the tracking in the backend. I'm not saying it's a good solution.

Re: No Cookie for You

#40
post #33
post #3

A lot of people have the misconception that the EU cookie law applies to all cookies, but as the blog post correctly points out, that just isn't the case.

Also, it only applies in the EU. You don't need to display any banners outside the EU. Not that I am pro-privacy invasion, I'm not, but I'm definitely anti-annoying-popups.

I am also of this position – however not everyone in my team is. We are currently investigating this in my project.

Do you have an authoritative source which i can show our team regarding this?

Post reply on HN