• TheChargedCreeper864@lemmy.ml
    link
    fedilink
    English
    arrow-up
    13
    arrow-down
    1
    ·
    10 months ago

    How would blocking the pop-up be violating the law, though? If the pop-up doesn’t show, you’re not able to agree to cookies. You don’t provide your explicit consent, therefore the website must assume you don’t want to be tracked. The presence of the pop-up shouldn’t be changing anything for people not willing to opt in, should it?

    Or perhaps they’re self-aware and have set it up to only opt you out by filling out the form, which you can’t do if it isn’t there. Or they just want you to agree to those “required” cookies? I don’t know.

    • linearchaos@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      10 months ago

      Blocking the pop-up isn’t violating the law. Nevertheless we needed the cookie for the login. If we didn’t get you to authorize the cookie you really had no business in the app because it would not work for you. It was a bad design but it was third party.

      But we couldn’t even pop that up because the browsers just tried to slide by any notifications about cookies

      • torstein@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        10 months ago

        First-party cookies that are needed for site functionality (like a login cookie) dont require explicit consent.

        Feel free to proceed without a cookie banner.

        From gdpr.eu:

        Strictly necessary cookies — These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site. Cookies that allow web shops to hold your items in your cart while you are shopping online are an example of strictly necessary cookies. These cookies will generally be first-party session cookies. While it is not required to obtain consent for these cookies, what they do and why they are necessary should be explained to the user

      • TheChargedCreeper864@lemmy.ml
        link
        fedilink
        English
        arrow-up
        1
        ·
        10 months ago

        It took me so long to figure out what you meant about accounts and stuff until I remembered you were talking about your own product. I get it now. Do you think it’s a similar situation here, where the site is reliant on these third-party cookies to function at all?

    • Reddfugee42@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      10
      ·
      edit-2
      10 months ago

      They literally explained. Some jurisdictions require them to ask you about cookies but the way some people configure their browser blocks this legally required prompt, potentially exposing them to legal action.

      • hemko@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        12
        arrow-down
        1
        ·
        edit-2
        10 months ago

        The cookie popup is only required if you’re serving cookies. If the user is unable to accept/reject, or chooses not to, the correct action is to not serve any cookies to stay compliant with the law.

        It is obvious that you should not serve a single cookie until after the user has accepted it. Unless you’re intentionally being an ass of course

      • dual_sport_dork 🐧🗡️@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        edit-2
        10 months ago

        Horseshit. The legislation does not just require that they “ask.”

        If the pop-up can’t be served, all it means is that they can’t use the cookies or tracking restricted by the legislation. If the user did not consent for any reason, then they did not consent. This includes if the pop-up is not displayed for whatever reason. It’s not the user’s fault CNN is too stupid to understand this. If they don’t serve illegal cookies or perform illegal tracking, then they don’t have to ask. It’s pretty damn simple.

        In reality, they’re just using this to try to prevent people from using an ad blocker on their site, and making up a rationalization post-hoc.