6 ms·

This looks like it could be very valuable for quite a lot of people- thank you for making it! Just a couple first impressions from your site... loading it on a

by pinum 2y ago

This looks like it could be very valuable for quite a lot of people- thank you for making it! Just a couple first impressions from your site... loading it on a phone, the first thing I see is this: https://imgur.com/4maP1vV https://imgur.com/4maP1vV (1) The entire contents of the site is completely covered by a cookie warning. This is honestly quite annoying even for an SWE like me, never mind your target audience. I know at least one older person who doesn't understand these cookie modals at all and refuses to touch them. They either continue using the site in the background without accepting/rejecting(!), or if that's not possible they just leave the site. I'd suggest you carefully check whether you actually need this modal at all. If the only cookies you use are technically necessary, then (based on my layman understanding of the law) you don't need to show it. If you absolutely must use tracking cookies, then maybe consider a more subtle approach that allows the user to continue reading the page without deciding. (2) "Join Now" makes it sound like I'm signing up to a subscription, rather than making a one-off payment.

cruffle_duffle 2y ago
People should just stop including those warnings. Unless they are a google, FB or some other juicy politically rich target for the EU to make an example of, they are a complete waste of time. Nobody is going to hassle you about it.
- codazoda 2y ago
  Unfortunately, this isn’t true. There is at least one organization out there launching privacy suits to extract settlements from small players.
  - tommica 2y ago
    Wow... Do you know the orgs name?
    - atoav 2y ago
      I am just going to leave this here: https://www.enforcementtracker.com/ https://www.enforcementtracker.com/ Yeah, you better comply. And it is also pretty simple — if you don't so anything that requires that you get informed consent from your users you don't need to ask them. Each combination of personal datum and purpose requires such consent if it isn't a strictly needed purpose (legitimate interest). Example: If you have an online shop you can e.g. collect someones address for the purpose of shipping — if they order and enter there address the user implicitly gave you their informed consent that they agree to you using that address to ship the product to them. Logical: when they order and pay money it can be assumed they want to give their address for that purpose. They did not give you consent to sell that same address off to the highest bidder. If that is what you need to do, you would have to explicitly ask them to whom you want to sell that data and what they plan to do with it — same data, but different purpose. Not legitimate interest since you don't strictly need to do that to sell a product. And you better have a clear wording describing that purpose otherwise you collected uninformed consent and that is worth zlich. If you feel like you need to trick users into agreeing, that is what the law aims to prevent. IP adresses and such have also been ruled personal data. Server side logging for technical purposes is legitimate interest, but storing the same data anywhere (not only cookies!) for the purpose of ad tracking requires you to get the users informed consent before collecting the data. You can assume that if it can be used to personally identify a user in a sea of users, it is personal data, even if it needs to be used in conjunction with other data to reach that identifiability. Also: if there is a million "No" switches with two menu layers and one green "Accept" button: you created a nice toy there, but it didn't gather informed concent from your user and is therefore utterly useless. Informed consent must be given freely. If you make one easier than the other it hasn't been given freely. If you visually code one as the good/default and the other as the bad/meaningless/complicated choice, the choice was not made freely. Play stupid games, win stupid prices. The law is pretty clear on all that, lived reality hasn't cought up yet and people pay real money for that. I recommend that you just read the law, it is probably worth to read instead of copying what everybody else (including the big ones) are doing.
      - meigwilym 2y ago
        But isn't the cookie banner for asking permission to use third party cookies? I don't think I ever have seen a cookie banner asking if I agree to my data being sold.
- Jaxan 2y ago
  Or they just stop with all this nonsense by not having third party tracking cookies in the first place. Legitimate usage of cookies doesn’t need such a banner.
kcsaba2 2y ago
Thank you so much for the feedback, that pesky banner indeed. I have fixed both issues. I mean the banner is still annoying, but way smaller.

by pinum 2y ago

cruffle_duffle 2y ago

People should just stop including those warnings. Unless they are a google, FB or some other juicy politically rich target for the EU to make an example of, they are a complete waste of time. Nobody is going to hassle you about it.

codazoda 2y ago
Unfortunately, this isn’t true. There is at least one organization out there launching privacy suits to extract settlements from small players.
- tommica 2y ago
  Wow... Do you know the orgs name?
  - atoav 2y ago
    I am just going to leave this here: https://www.enforcementtracker.com/ https://www.enforcementtracker.com/ Yeah, you better comply. And it is also pretty simple — if you don't so anything that requires that you get informed consent from your users you don't need to ask them. Each combination of personal datum and purpose requires such consent if it isn't a strictly needed purpose (legitimate interest). Example: If you have an online shop you can e.g. collect someones address for the purpose of shipping — if they order and enter there address the user implicitly gave you their informed consent that they agree to you using that address to ship the product to them. Logical: when they order and pay money it can be assumed they want to give their address for that purpose. They did not give you consent to sell that same address off to the highest bidder. If that is what you need to do, you would have to explicitly ask them to whom you want to sell that data and what they plan to do with it — same data, but different purpose. Not legitimate interest since you don't strictly need to do that to sell a product. And you better have a clear wording describing that purpose otherwise you collected uninformed consent and that is worth zlich. If you feel like you need to trick users into agreeing, that is what the law aims to prevent. IP adresses and such have also been ruled personal data. Server side logging for technical purposes is legitimate interest, but storing the same data anywhere (not only cookies!) for the purpose of ad tracking requires you to get the users informed consent before collecting the data. You can assume that if it can be used to personally identify a user in a sea of users, it is personal data, even if it needs to be used in conjunction with other data to reach that identifiability. Also: if there is a million "No" switches with two menu layers and one green "Accept" button: you created a nice toy there, but it didn't gather informed concent from your user and is therefore utterly useless. Informed consent must be given freely. If you make one easier than the other it hasn't been given freely. If you visually code one as the good/default and the other as the bad/meaningless/complicated choice, the choice was not made freely. Play stupid games, win stupid prices. The law is pretty clear on all that, lived reality hasn't cought up yet and people pay real money for that. I recommend that you just read the law, it is probably worth to read instead of copying what everybody else (including the big ones) are doing.
    - meigwilym 2y ago
      But isn't the cookie banner for asking permission to use third party cookies? I don't think I ever have seen a cookie banner asking if I agree to my data being sold.
Jaxan 2y ago
Or they just stop with all this nonsense by not having third party tracking cookies in the first place. Legitimate usage of cookies doesn’t need such a banner.

kcsaba2 2y ago

Thank you so much for the feedback, that pesky banner indeed. I have fixed both issues. I mean the banner is still annoying, but way smaller.