Live data from Hacker News

Please stop putting cookie pop-ups on your website (2022)

olivergrimsley.com

101–110 of 211 posts

Re: Please stop putting cookie pop-ups on your website (2022)

#101

> Enact a law that requires a service to respect the do not track signal from a browser (currently entirely voluntary), and not store any tracking cookies, clear gifs or other trackers – and require that a site not “discriminate” against users who elect no tracking – basically – provide all functions to users whether they consent or do not consent. This is indeed the obvious solution. I don't understand why the EU di…

That there is no such mechanism can be explained pretty well with this extreme scenario:

- Browsers would come with the no tracking signal enabled by default (why wouldn't they?) so that tracking would become opt-in.

- Nobody chooses to be tracked.

- The whole industry built on tracking users collapses, namely advertisement

- Web sites who based their business model on advertisement go under

Because of this I bet that the industry is lobbying extremely hard for solutions that are maximally useless and inconvenient for the user. Unless the user "chooses" to be tracked of course.

In that vein, another proposal for stemming the flood of cookie consent banners comes from the German government and outlines a multi vendor strategy with very little technical guidance for centralized consent management systems:

https://www.heise.de/en/news/Consent-management-German-gover...

Re: Please stop putting cookie pop-ups on your website (2022)

#102
post #7

The cookie policy is a stupid value-signalling stunt with only negative real-life effects. The correct way of handling the problem would have been through request headers and browser settings, or simply, use the existing option of either allowing or disallowing cookies, and put this option on a per-site basis and a bit more into the users face..

> The cookie policy

No. It isn't a "cookie policy".

The GDPR states I must give a specific opt-in approval to provide my personal data and allow it to be passed on.

You can use as many cookies as you like, but if you want to track me personally (advertisers take a bow) then you need my specific consent to do so. And so you should.

I'm amazed I have to keep explaining this to American web designers who should know better. This has been law in the UK and EU for quite some time now and is a prerequisite to doing business here.

The GDPR is a bloody good law. It makes the gathering of unnecessary personal data a liability, as it should be. See here: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re...

Re: Please stop putting cookie pop-ups on your website (2022)

#103

So, the problem with this is: the law. If you use session management: GOOD NEWS GDPR AND CPPA UNDER PENALTY OF THE COURTS DEMAND YOU INFORM USERS and if you know a better way than an intrusive "accept this before you can continue" by all means pipe up but the problem is overbearing laws, not "people following them". The law requires that you disallow access until people tell you their position on your handling of the…

gdpr works a bit differently. You can use cookies for providing website operations, for it you don't even need a banner. You can't easily use cookies/trackers for ad purposes. You can still display ads but these shouldn't use cookies (this way again - no need for banner).

Re: Please stop putting cookie pop-ups on your website (2022)

#104

Earlier quoted context omitted.

The vast majority of websites just want to know where their visitors are coming from and, if they are selling a product, some aggregate level of demographic knowledge to tailor their marketing efforts. They really don’t care about an individual or even small cohort and aren’t selling the data on. Targeting advertising is sooo much more effective for small and medium sized businesses and actually makes many businesses…

It doesn't matter what they want. It doesn't matter why they want it. They are not entitled to this information. They should not be able to know anything at all about us without our explicit consent. We should not have to sacrifice our privacy and peace of mind so that businesses can succeed. If they can't succeed without surveilling us and selling us out, then let them go bankrupt.

If that’s where this all shakes out to it will have the affect of creating retail monopolies worse than even in the pre internet days as marketing will be simply too expensive for many online small businesses. 90% of Shopify stores would be dead in the water.

Re: Please stop putting cookie pop-ups on your website (2022)

#105

>"Almost every major website you visit today pops up a banner to warn you that it uses “cookies.” This is not legally required in the U.S. or in most places, and where it is, the vast majority of sites do not comply with legal requirements."

afaik gdpr is valid for eu citizens that are in other countries too, including us. US ofc wouldn't do a thing, but EU can act on your business in their land. That's why cookies are everywhere - websites can't know if you are eu citizen or not. Another problem is that - if you don't use cookies for ads/tracking, you don't need a banner but many websites are ignoring this Another problem - imo gdpr should have been adapted to enforce some http header with auto-response so that the banner wouldn't be needed

Re: Please stop putting cookie pop-ups on your website (2022)

#106

Earlier quoted context omitted.

The request from management to engineering was "make us gdpr compatible, show that cookie banner we see on other sites or some shit", implementation details were designed by IT.

At the same time if you suggest "maybe we shouldn't use X, Y and Z analytics then" then you get laughed out of the room. So is there really a choice?

> then you get laughed out of the room

If this is the case, you need to re-asses both your work culture and 'belief' in what Google is telling you.

Re: Please stop putting cookie pop-ups on your website (2022)

#107

> Enact a law that requires a service to respect the do not track signal from a browser (currently entirely voluntary), and not store any tracking cookies, clear gifs or other trackers – and require that a site not “discriminate” against users who elect no tracking – basically – provide all functions to users whether they consent or do not consent. This is indeed the obvious solution. I don't understand why the EU di…

That there is no such mechanism can be explained pretty well with this extreme scenario: - Browsers would come with the no tracking signal enabled by default (why wouldn't they?) so that tracking would become opt-in. - Nobody chooses to be tracked. - The whole industry built on tracking users collapses, namely advertisement - Web sites who based their business model on advertisement go under Because of this I bet tha…

> - Browsers would come with the no tracking signal enabled by default (why wouldn't they?) so that tracking would become opt-in.

> - Nobody chooses to be tracked.

> - The whole industry built on tracking users collapses, namely advertisement

> - Web sites who based their business model on advertisement go under

This seems like the perfect outcome to me, but I doubt we'll be this lucky

Re: Please stop putting cookie pop-ups on your website (2022)

#108

Maybe stop doing stupid shit that will legally require you to inform users that you're about to sell/share everything you know about them to 3rd parties? I fail to understand companies that display page after page of cookies and tracking stuff for you to approve don't see the issue with their actions or the insanity of "allow us to share data with our 1500 partners". Does no one in these business look at this and go:…

The vast majority of websites just want to know where their visitors are coming from and, if they are selling a product, some aggregate level of demographic knowledge to tailor their marketing efforts. They really don’t care about an individual or even small cohort and aren’t selling the data on. Targeting advertising is sooo much more effective for small and medium sized businesses and actually makes many businesses…

all this effort - easily defeated by adblock and antitracking tools xD

Re: Please stop putting cookie pop-ups on your website (2022)

#109

Earlier quoted context omitted.

The vast majority of websites just want to know where their visitors are coming from and, if they are selling a product, some aggregate level of demographic knowledge to tailor their marketing efforts. They really don’t care about an individual or even small cohort and aren’t selling the data on. Targeting advertising is sooo much more effective for small and medium sized businesses and actually makes many businesses…

> Targeting advertising is sooo much more effective for small and medium sized businesses I'm starting to question that, but without any proof that just me rambling. Assuming that it works, I'd actually be fine with a site saying "Hey, just letting you know, we use Google Analytics to learn more about you, is that cool?". The 1500 partners and 50+ trackers aren't numbers I'm making up, those are numbers I frequently…

Anecdotally for the three ecom businesses I’ve run/worked at it’s been our only method of profitable marketing.

As usual it’s the extreme ends of the spectrum that ruin for everyone.

Re: Please stop putting cookie pop-ups on your website (2022)

#110

Maybe stop doing stupid shit that will legally require you to inform users that you're about to sell/share everything you know about them to 3rd parties? I fail to understand companies that display page after page of cookies and tracking stuff for you to approve don't see the issue with their actions or the insanity of "allow us to share data with our 1500 partners". Does no one in these business look at this and go:…

The vast majority of websites just want to know where their visitors are coming from and, if they are selling a product, some aggregate level of demographic knowledge to tailor their marketing efforts. They really don’t care about an individual or even small cohort and aren’t selling the data on. Targeting advertising is sooo much more effective for small and medium sized businesses and actually makes many businesses…

If they can't do business without selling users data, then they shouldn't be doing the business.
Post reply on HN