Live data from Hacker News

Please stop putting cookie pop-ups on your website (2022)

olivergrimsley.com

11–20 of 211 posts

Re: Please stop putting cookie pop-ups on your website (2022)

#11
This doesn't read quite right to me. Maybe I missed something.

Under the GDPR sites are emphatically NOT allowed to deny service over rejecting cookies.

Iirc the only valid options are providing a paid alternative or blocking service to the entire class of GDPR covered citizens.

Re: Please stop putting cookie pop-ups on your website (2022)

#12
So, the problem with this is: the law. If you use session management: GOOD NEWS GDPR AND CPPA UNDER PENALTY OF THE COURTS DEMAND YOU INFORM USERS and if you know a better way than an intrusive "accept this before you can continue" by all means pipe up but the problem is overbearing laws, not "people following them". The law requires that you disallow access until people tell you their position on your handling of their personally identifiable information and welcome to modern web dev hell. If you don't like it, hell has done its job.

Both Europe and California consider IP addresses PII and this is the result.

Re: Please stop putting cookie pop-ups on your website (2022)

#13
post #6

The larger lesson here is this is what happens when governments try to regulate things they don't understand. Cookie popups just add friction, and it's not clear consumers see any real privacy benefit. What's even worse is people seem to not care that the policy isn't working, but they aren't telling lawmakers to fix it.

Website admins chose the path of malicious compliance.

Re: Please stop putting cookie pop-ups on your website (2022)

#15
post #10
post #6

The larger lesson here is this is what happens when governments try to regulate things they don't understand. Cookie popups just add friction, and it's not clear consumers see any real privacy benefit. What's even worse is people seem to not care that the policy isn't working, but they aren't telling lawmakers to fix it.

The lawmakers regulated that a website should warn you, and then upgraded to ask for your consent, before collecting and storing privately identifiable information about you. The regulation doesn't mention cookie popups. The easiest way to comply is to not collect nor store any such information.

> The regulation doesn't mention cookie popups. The easiest way to comply is to not collect nor store any such information.

Utopia is just around the corner as long as everyone does exactly as I say rather than being driven by self interest.

Re: Please stop putting cookie pop-ups on your website (2022)

#16
post #8
post #3

Interesting article. This policy has felt like a complete failure, but I didn't know the depths of how badly it has failed. I would really like to see these die. Regulators should just work with browser vendors to make an API that I can set at the browser level, and websites just read that to know my preferences and leave me alone.

Your preferences should be on the website level though, not global. And you should be asked about it on first visiting the website. Let me explain why with an example: say you're the type of people who doesn't care about "privacy" online ("I've got nothing to hide"), or you do; and you want to "support " certain ad-supported websites you're a fan of; but not that new clickbait toilet paper your aunt sends you. I can'…

Why not do like with popups, and show a little toast with "x tracking cookies were blocked, click to allow"? Cookies could have to register whether they are essential or not. It's really wild how much work must have been created by distributing this problem to every website on earth instead of doing it in the browser.

Re: Please stop putting cookie pop-ups on your website (2022)

#17
post #6

The larger lesson here is this is what happens when governments try to regulate things they don't understand. Cookie popups just add friction, and it's not clear consumers see any real privacy benefit. What's even worse is people seem to not care that the policy isn't working, but they aren't telling lawmakers to fix it.

I'm not sure why you're being downvoted. I believe the way you stated this is accurate.

The regulation and its outcome was clearly not understood or intended by those who mandated it. Absolutely everyone is suffering from this.

As for the "not care", I think the primary issue is that most people don't make much effort to understand the things they use. If they understood what was going on, they would be more upset and possibly make some effort to get things changed/reverted.

I would put a bit of blame on big corporations for not spending some of their lobbying money on fighting this requirement - not because they should get a free pass at misusing our info, but because they should be well equipped to know that the regulation will be addressed in a crappy way that costs them money and annoys users.

Re: Please stop putting cookie pop-ups on your website (2022)

#18
post #10
post #6

The larger lesson here is this is what happens when governments try to regulate things they don't understand. Cookie popups just add friction, and it's not clear consumers see any real privacy benefit. What's even worse is people seem to not care that the policy isn't working, but they aren't telling lawmakers to fix it.

The lawmakers regulated that a website should warn you, and then upgraded to ask for your consent, before collecting and storing privately identifiable information about you. The regulation doesn't mention cookie popups. The easiest way to comply is to not collect nor store any such information.

How do you manage login sessions without?

If you're a site that has even basic analytics reporting requirements, how do you do any of that without?

"Don't do these things" is a decent option for sole traders, microbusiness and hobby website operators, but good luck selling that to anyone "in a suit" (more likely $500 jeans or chinos nowadays).

Re: Please stop putting cookie pop-ups on your website (2022)

#19
Cookie banners are a great reason for expirations dates on new policies. If it works: Great, renew it! If it does not work, is not required anymore or was just plain stupid: Never talk about it again and it will run out. But who will actively admit that regulation failed and work to undo it?
Post reply on HN