Live data from Hacker News

We removed advertising cookies, here's what happened

blog.sentry.io

101–110 of 191 posts

Re: We removed advertising cookies, here's what happened

#101

Can I voluntarily register somewhere and profile myself for the purposes of ad targeting? I'd really hate to just get completely random ads everywhere.

Are people downvoting because they think that no targeting means no ads? It just means worse ads and MORE ads because the ones that are there are less valuable. Ironic.

No targeting means they aren't keeping a dossier on my movements around the web. I don't want that, and I don't care what it does to the quality of ads I see. Besides, I'm sure my ad-blocker is up to the task.

Re: We removed advertising cookies, here's what happened

#102
post #63

While they removed cookie banners and say they no longer include dependencies that set cookies, browsing around the site for a bit I still see several cookies set. For example, visiting https://changelog.getsentry.com I get first-party cookies "_GRECAPTCHA", "ph_phc_UlHlA3tIQlE89WRH9NSy0MzlOg1XYiUXnXiYjKBJ4OT_posthog", and "_launchnotes_session", plus third-party cookie "_GRECAPTCHA" on recaptcha.net. Similarly, visi…

> If you're running a complex modern site and decide to do away with cookie banners, you generally need to pair this with browser automation that crawls your site and verifies that you (and your dependencies) are in fact not setting any cookies.

Correction: any cookies which are not technically required for the basic operation of the site (such as a shopping cart ID).

Re: We removed advertising cookies, here's what happened

#103
post #63

While they removed cookie banners and say they no longer include dependencies that set cookies, browsing around the site for a bit I still see several cookies set. For example, visiting https://changelog.getsentry.com I get first-party cookies "_GRECAPTCHA", "ph_phc_UlHlA3tIQlE89WRH9NSy0MzlOg1XYiUXnXiYjKBJ4OT_posthog", and "_launchnotes_session", plus third-party cookie "_GRECAPTCHA" on recaptcha.net. Similarly, visi…

> If you're running a complex modern site and decide to do away with cookie banners, you generally need to pair this with browser automation that crawls your site and verifies that you (and your dependencies) are in fact not setting any cookies. Correction: any cookies which are not technically required for the basic operation of the site (such as a shopping cart ID).

I'm out of the loop on the latest and greatest web technologies:

if I'm a shopping cart website, how do I keep track of you as a user/session enough to identify you and pair you to the contents of your cart on my backend without a cookie?

Cramming a sessionId into localStorage/sessionStorage seems kind of like the same thing? Am I missing somehting?

Re: We removed advertising cookies, here's what happened

#104
post #63

While they removed cookie banners and say they no longer include dependencies that set cookies, browsing around the site for a bit I still see several cookies set. For example, visiting https://changelog.getsentry.com I get first-party cookies "_GRECAPTCHA", "ph_phc_UlHlA3tIQlE89WRH9NSy0MzlOg1XYiUXnXiYjKBJ4OT_posthog", and "_launchnotes_session", plus third-party cookie "_GRECAPTCHA" on recaptcha.net. Similarly, visi…

The sentrysid, sc, and sudo cookies are all login state cookies btw.

Re: We removed advertising cookies, here's what happened

#105
post #63

While they removed cookie banners and say they no longer include dependencies that set cookies, browsing around the site for a bit I still see several cookies set. For example, visiting https://changelog.getsentry.com I get first-party cookies "_GRECAPTCHA", "ph_phc_UlHlA3tIQlE89WRH9NSy0MzlOg1XYiUXnXiYjKBJ4OT_posthog", and "_launchnotes_session", plus third-party cookie "_GRECAPTCHA" on recaptcha.net. Similarly, visi…

[deleted]

Re: We removed advertising cookies, here's what happened

#106

Earlier quoted context omitted.

> If you're running a complex modern site and decide to do away with cookie banners, you generally need to pair this with browser automation that crawls your site and verifies that you (and your dependencies) are in fact not setting any cookies. Correction: any cookies which are not technically required for the basic operation of the site (such as a shopping cart ID).

I'm out of the loop on the latest and greatest web technologies: if I'm a shopping cart website, how do I keep track of you as a user/session enough to identify you and pair you to the contents of your cart on my backend without a cookie? Cramming a sessionId into localStorage/sessionStorage seems kind of like the same thing? Am I missing somehting?

A link to the iOS App. :-D

Re: We removed advertising cookies, here's what happened

#107
post #63

While they removed cookie banners and say they no longer include dependencies that set cookies, browsing around the site for a bit I still see several cookies set. For example, visiting https://changelog.getsentry.com I get first-party cookies "_GRECAPTCHA", "ph_phc_UlHlA3tIQlE89WRH9NSy0MzlOg1XYiUXnXiYjKBJ4OT_posthog", and "_launchnotes_session", plus third-party cookie "_GRECAPTCHA" on recaptcha.net. Similarly, visi…

You're right that fighting these cookies is not trivial and automation helps a lot. The remaining cookies are functional ones which are needed to use the sandbox for instance. That the changelog sets cookies is a known issue that will be resolved once the changelog is moved off launchnotes.

Re: We removed advertising cookies, here's what happened

#108
post #85

> 42.7% of internet users worldwide use ad blockers. Given how many people I know that still type google into the google search bar, I find this number to be extraordinarily high.

Yeah I would actually believe that for sentry.io visitors, but for the internet at large, that seems high.

Re: We removed advertising cookies, here's what happened

#109

Earlier quoted context omitted.

It is really not very complicated. It is actually very simple. When I visit a new website, I check what it requests using uBlock Origin. Then just block those unwanted stuff. If the website does not work without something like Google fonts or tag manager or whatever other bloat, it means, that it is shoddy-made, by an either uninformed or ignorant entity. It probably is illegal according to EU law as well, since I ne…

I do the opposite. I block everything, and if a new site I’m curious on doesn’t work, I’ll look at what’s needed to let it work. Your method would potentially require some cleaning up since things were allowed to initially run. If the site requires things I don’t like, I just close the tab and move on.

I actually do a whitelist approach. I only described it badly.

Re: We removed advertising cookies, here's what happened

#110
post #63

While they removed cookie banners and say they no longer include dependencies that set cookies, browsing around the site for a bit I still see several cookies set. For example, visiting https://changelog.getsentry.com I get first-party cookies "_GRECAPTCHA", "ph_phc_UlHlA3tIQlE89WRH9NSy0MzlOg1XYiUXnXiYjKBJ4OT_posthog", and "_launchnotes_session", plus third-party cookie "_GRECAPTCHA" on recaptcha.net. Similarly, visi…

The sentrysid, sc, and sudo cookies are all login state cookies btw.

They might be tracking whether I'm logged in, but since I didn't log into the site I didn't consent for them to store that state on my client. The e-Privacy directive is quite particular, and unless these cookies are "strictly necessary" to operate the sandbox they're not allowed.
Post reply on HN