Live data from Hacker News

Most websites don't need cookie consent banners

block81.com

91–100 of 103 posts

Re: Most websites don't need cookie consent banners

#91
post #10

Earlier quoted context omitted.

can you give examples of serious online businesses that are not doing those things? Here are the industries that I've worked in that all did behavioral tracking for the above applications * gaming * music industry * healthcare * social media * news * internet search * online retail

B2B SaaS

Sales, marketing, CS, self-service all need behavioral tracking. Can you share a practical example?

Re: Most websites don't need cookie consent banners

#92
post #89
post #88

Earlier quoted context omitted.

You are confidently incorrect. Consent is not needed if you only track for your own business and do not send the data to other businesses. One of the big GDPR-compliant website analytics tools, matomo, even has a dedicated page on this topic: https://matomo.org/blog/2021/10/matomo-exempt-from-tracking-... "Matomo has also been approved by the French Data Protection Authority (CNIL) as one of the select few web analyt…

You linked the wrong page

technically the quote was included on the linked page, but I added a second link to make it more clear :)

Re: Most websites don't need cookie consent banners

#93
post #6

"Advertising or behavioral tracking cookies" Any real business needs to do behavioral tracking for campaign conversions, add-to-cart, customer acquisition, funneling, retention, personalization, etc. I love how we all hate cookie banners and say they are unnecessary, but are salaries are all paid by apps that do behavioral tracking. Only hobby blogs can get by without it.

There's no _need_ to use cookies for tracking purposes though, it's usually just easier/cheaper/quicker (or requested by the marketing department) to use off the shelf software than actually spend the time to implement these things. But if you have a cart, you need a cookie banner regardless of any tracking you are doing.

Even the biggest tech companies, with surplus engineering resources, do third party integrations.

"easier / cheaper / quicker" means that will be the solution . You can't tell your boss "let's spend more money, more time, more risk" on getting it done.

Re: Most websites don't need cookie consent banners

#94

Earlier quoted context omitted.

The failure of the EU was to not write into (an updated version of the law) that setting a specific HTTP header means "no", and "no" means "no" not "show me a popup to ask" (i.e. showing a popup in such cases would not be allowed).

It wouldn't matter because most of the consent flows you see are already not compliant. The problem is a perpetual lack of enforcement even for the blatant breaches. An HTTP header wouldn't change the situation, websites would still ignore it and still get away with it.

A mandatory header would get implemented on sites that even halfway try to comply, and it would be extra easy to enforce on fully malicious sites. I think it would be useful.

Re: Most websites don't need cookie consent banners

#95
post #61
post #30

Earlier quoted context omitted.

For my company, being able to view the user journey throughout the site in the analytics is pretty valuable. We don't care who the specific users are - but the tracking gives us an idea of how many people use the site? do they have a good experience? are they giving us money? do we have a bug somewhere we're missing? etc. All that is valuable as a business.

Back in the day we used to track user activity via a "hit id" (basically a random string) that was generated on the backend that added a "post" request to every page. Idk if that was a good idea or not. We depended on cookies for your cart and stuff.

The regulations are about tracking, and a chain of form fields and a cookie need to follow basically the same rules.

Re: Most websites don't need cookie consent banners

#96
post #92
post #89

Earlier quoted context omitted.

You linked the wrong page

technically the quote was included on the linked page, but I added a second link to make it more clear :)

i meant the subject matter. a long list of specs doesn't help the discussion.

Just give an example. If this hypothetical solution is so easy, why are examples hard to come by?

Re: Most websites don't need cookie consent banners

#97
post #6

"Advertising or behavioral tracking cookies" Any real business needs to do behavioral tracking for campaign conversions, add-to-cart, customer acquisition, funneling, retention, personalization, etc. I love how we all hate cookie banners and say they are unnecessary, but are salaries are all paid by apps that do behavioral tracking. Only hobby blogs can get by without it.

It's a shame this is downvoted. It doesn't make it right, but it is true. Until the regulation actually gets enforced so that everyone is on a level playing field and does not do such things, you will be at a disadvantage if you're the only one to comply, so the winning strategy is to not comply and engage in such practices just like your competitors do.

> you will be at a disadvantage if you're the only one to comply, so the winning strategy is to not comply

"need" is the wrong word for this. And the comment doesn't talk about it as a prisoner's dilemma, it says "need" unconditionally. The downvotes are not sad.

Re: Most websites don't need cookie consent banners

#98
post #83

Earlier quoted context omitted.

Disagreed. You can absolutely do all analytics, personalization and marketing in-house on your properties. You only need data sharing if you want to influence advertising on other properties or if you display others' ads on yours. Whether you want to do so is a different matter. This obviously requires (potentially custom) software and infrastructure, vs throwing in GTM and calling it a day. If there is no regulatory…

1st party behavior tracking still requires consent. And nearly every business needs third party integrations. I’m still waiting for someone to give me a working example (a real business )

The level of "tech" for a lot of trade and local businesses is often just a mobile phone and word of mouth, no online advertising industrial complex necessary. Those are still very real businesses. When advertising is used it's likely "old school" advertising with no tracking or analytics.

Ironically, if you are looking for a tradesman and do stumble upon an online ad or very polished web presence, be wary as it's basically guaranteed to lead to a boiler room full of scammers who will overcharge you and farm out the actual work to the lowest bidder. Sample: https://en.wikipedia.org/wiki/Locksmith_scam

Re: Most websites don't need cookie consent banners

#99

Earlier quoted context omitted.

The failure of the EU was to not write into (an updated version of the law) that setting a specific HTTP header means "no", and "no" means "no" not "show me a popup to ask" (i.e. showing a popup in such cases would not be allowed).

It wouldn't matter because most of the consent flows you see are already not compliant. The problem is a perpetual lack of enforcement even for the blatant breaches. An HTTP header wouldn't change the situation, websites would still ignore it and still get away with it.

The consent flows are good enough that the companies selling them can claim that they're compliant, and enforcement is slow, partly because there are so many things that are not 100% clear.

The header would be a relatively clear cut situation, also opening the path to private enforcement via NOYB & Co.

Re: Most websites don't need cookie consent banners

#100
post #91

Earlier quoted context omitted.

B2B SaaS

Sales, marketing, CS, self-service all need behavioral tracking. Can you share a practical example?

You asked for the websites that I worked for. I am saying the B2B SaaS sites that I have supported didn't use behavioral tracking. I can't share the exact sites due to NDAs.
Post reply on HN