Live data from Hacker News

Please stop putting cookie pop-ups on your website (2022)

olivergrimsley.com

21–30 of 211 posts

Re: Please stop putting cookie pop-ups on your website (2022)

#21
post #6

The larger lesson here is this is what happens when governments try to regulate things they don't understand. Cookie popups just add friction, and it's not clear consumers see any real privacy benefit. What's even worse is people seem to not care that the policy isn't working, but they aren't telling lawmakers to fix it.

Website admins chose the path of malicious compliance.

Not necessarily. Many are told by their bosses to either put minimal effort into becoming compliant, or worse, told to use a horrid cookie notice service that creates so much user frustration that some of us abandon the site rather than deal with it.

I think with few exceptions, most web admins just want to get the cookie notice sh*t out of the way and get on with work that matters.

Re: Please stop putting cookie pop-ups on your website (2022)

#22
post #8

Earlier quoted context omitted.

Your preferences should be on the website level though, not global. And you should be asked about it on first visiting the website. Let me explain why with an example: say you're the type of people who doesn't care about "privacy" online ("I've got nothing to hide"), or you do; and you want to "support " certain ad-supported websites you're a fan of; but not that new clickbait toilet paper your aunt sends you. I can'…

Why not do like with popups, and show a little toast with "x tracking cookies were blocked, click to allow"? Cookies could have to register whether they are essential or not. It's really wild how much work must have been created by distributing this problem to every website on earth instead of doing it in the browser.

Because Chrome (Google) and a large chunk of the web media publishing ecosystem are hooked on this crap. It's a hundred billion dollar business.

And yes, it's mostly selling garbage, but that's hardly unique in 21st century capitalism.

Re: Please stop putting cookie pop-ups on your website (2022)

#23
post #18
post #10

Earlier quoted context omitted.

The lawmakers regulated that a website should warn you, and then upgraded to ask for your consent, before collecting and storing privately identifiable information about you. The regulation doesn't mention cookie popups. The easiest way to comply is to not collect nor store any such information.

How do you manage login sessions without? If you're a site that has even basic analytics reporting requirements, how do you do any of that without? "Don't do these things" is a decent option for sole traders, microbusiness and hobby website operators, but good luck selling that to anyone "in a suit" (more likely $500 jeans or chinos nowadays).

That is why we should do proper enforcement. Cookie popup that is not needed 1% revenue fine for each month it stays up. Suits will start to understand things really really fast.

Re: Please stop putting cookie pop-ups on your website (2022)

#24

By far, my favorite feature in iOS 18 is Safari’s “hide distracting items” feature. It lets you permanently hide the cookie popups on a per site basis. And the annoying google sign in popups, and the annoying scroll down popups.

Whoa thanks for letting me know this exists

Re: Please stop putting cookie pop-ups on your website (2022)

#25
post #18
post #10

Earlier quoted context omitted.

The lawmakers regulated that a website should warn you, and then upgraded to ask for your consent, before collecting and storing privately identifiable information about you. The regulation doesn't mention cookie popups. The easiest way to comply is to not collect nor store any such information.

How do you manage login sessions without? If you're a site that has even basic analytics reporting requirements, how do you do any of that without? "Don't do these things" is a decent option for sole traders, microbusiness and hobby website operators, but good luck selling that to anyone "in a suit" (more likely $500 jeans or chinos nowadays).

You don't need a cookie popup for managing login sessions. Things that are essential to providing the feature don't need permission.

At least based on the so called cookie law. There is also GDPR, but you'd typically agree to that on signing up, not on accessing the site.

Re: Please stop putting cookie pop-ups on your website (2022)

#26

By far, my favorite feature in iOS 18 is Safari’s “hide distracting items” feature. It lets you permanently hide the cookie popups on a per site basis. And the annoying google sign in popups, and the annoying scroll down popups.

and the annoying scroll down popups

Wait, is it when you pull the page by moving your finger to the bottom of the screen and the “header” pops up?

Re: Please stop putting cookie pop-ups on your website (2022)

#27
If you do not collect my data outside for what is strictly needed, then all is good. Remove analytics, recaptcha, embedded youtube, google cdn and any other things you do not actually need to run your product. And collect only the info you need (and nope, you really do not need my address or phone number unless you ship physical goods, so why are you getting it?). You probably do not need my email address besides for spam (forgot password is not a thing; either use one of the oauth providers, or hash the email and let the user enter it; if it matches you can send the email).

Then you don't need cookie banners or gdpr consent popups. It is not that hard. But you want to screw your clients for profit, I know, in that case, you need them or get fined. Which you should be for misusing my information/behaviour and privacy. Nothing good did come of ad tracking, user fingerprinting and data selling, so I wish you many fines.

Re: Please stop putting cookie pop-ups on your website (2022)

#28
post #8
post #3

Interesting article. This policy has felt like a complete failure, but I didn't know the depths of how badly it has failed. I would really like to see these die. Regulators should just work with browser vendors to make an API that I can set at the browser level, and websites just read that to know my preferences and leave me alone.

Your preferences should be on the website level though, not global. And you should be asked about it on first visiting the website. Let me explain why with an example: say you're the type of people who doesn't care about "privacy" online ("I've got nothing to hide"), or you do; and you want to "support " certain ad-supported websites you're a fan of; but not that new clickbait toilet paper your aunt sends you. I can'…

The important part here is that it's at the browser level, IMO. Then it's the user's choice to either reject/accept all by default or get prompted once per page. I'd guess that 99.9% want to set it globally and never think about it again.

Re: Please stop putting cookie pop-ups on your website (2022)

#29
post #8

Earlier quoted context omitted.

Your preferences should be on the website level though, not global. And you should be asked about it on first visiting the website. Let me explain why with an example: say you're the type of people who doesn't care about "privacy" online ("I've got nothing to hide"), or you do; and you want to "support " certain ad-supported websites you're a fan of; but not that new clickbait toilet paper your aunt sends you. I can'…

Why not do like with popups, and show a little toast with "x tracking cookies were blocked, click to allow"? Cookies could have to register whether they are essential or not. It's really wild how much work must have been created by distributing this problem to every website on earth instead of doing it in the browser.

Lynx, back in the day, forced you to explicitly accept/reject each cookie offered by the server while loading the page. Modern browsers silently accept them all by default. Browsers have regressed.

Re: Please stop putting cookie pop-ups on your website (2022)

#30

This doesn't read quite right to me. Maybe I missed something. Under the GDPR sites are emphatically NOT allowed to deny service over rejecting cookies. Iirc the only valid options are providing a paid alternative or blocking service to the entire class of GDPR covered citizens.

That is not really GDPR. That is the ePrivacy ( ie. The Cookie Law from 2009 ) directive that supplements but sometimes overrules GDPR.

https://gdpr.eu/cookies/ # Cookie compliance

Post reply on HN