4 ms·

They are not collecting and using your personal data. To me (IANAL), it looks really different from LinkedIn. GDPR is about legality and covers the LinkedIn ca

They are not collecting and using your personal data. To me (IANAL), it looks really different from LinkedIn. GDPR is about legality and covers the LinkedIn case you mention.

whilenot-dev 1mo ago
> They are not collecting and using your personal data. Do you see how GDPR doesn't apply, then? ...you're contradicting yourself. I'd still question the legality of the data collection by altering the offered service without properly informing the affected users. Whether GDPR applies doesn't matter, and whether it's a free tier service doesn't matter either. You're a consumer of Cloudflare, so any consumer rights apply.
- cryptonym 1mo ago
  GDPR very much applies. As a website owner, you are responsible towards your users for data collection (your architectural choices, your responsibility). This was my concern on GDPR. Sibling comment says data collection is disabled in EU.
  - whilenot-dev 1mo ago
    Cool, so you went from > Cloudflare needs the data. [...] If someone is mad, maybe they should pay or use a different architecture. To "they would violate GDPR". Are you ok with that behavior then? And are you basing your ethical decision solely on the current legislation?
    - cryptonym 1mo ago
      I never said "they would violate GDPR". I was questioning if it could be the case. Someone said it's not the case as the feature is turned off in EU. Reading their blog, it also looks like they don't collect much identifiable data. When selecting free tier of such commercial MITM, opt-in RUM data collection is really far from the top ethical concern. I'm not saying it's a good thing and I'm not deploying their solutions to my websites.
      - whilenot-dev 1mo ago
        If it's turned off for EU customers, it's a pretty clear case that it would be in violation of GDPR, wouldn't it?
        cryptonym 1mo ago
        IANAL but it looks like they saw a risk and decided to not put you, as a website owner using their free tier, at risk of breaching GDPR for RUM. That was my concern and it's addressed.

They are not collecting and using your personal data. To me (IANAL), it looks really different from LinkedIn. GDPR is about legality and covers the LinkedIn case you mention.

whilenot-dev 1mo ago

> They are not collecting and using your personal data. Do you see how GDPR doesn't apply, then? ...you're contradicting yourself. I'd still question the legality of the data collection by altering the offered service without properly informing the affected users. Whether GDPR applies doesn't matter, and whether it's a free tier service doesn't matter either. You're a consumer of Cloudflare, so any consumer rights apply.

cryptonym 1mo ago
GDPR very much applies. As a website owner, you are responsible towards your users for data collection (your architectural choices, your responsibility). This was my concern on GDPR. Sibling comment says data collection is disabled in EU.
- whilenot-dev 1mo ago
  Cool, so you went from > Cloudflare needs the data. [...] If someone is mad, maybe they should pay or use a different architecture. To "they would violate GDPR". Are you ok with that behavior then? And are you basing your ethical decision solely on the current legislation?
  - cryptonym 1mo ago
    I never said "they would violate GDPR". I was questioning if it could be the case. Someone said it's not the case as the feature is turned off in EU. Reading their blog, it also looks like they don't collect much identifiable data. When selecting free tier of such commercial MITM, opt-in RUM data collection is really far from the top ethical concern. I'm not saying it's a good thing and I'm not deploying their solutions to my websites.
    - whilenot-dev 1mo ago
      If it's turned off for EU customers, it's a pretty clear case that it would be in violation of GDPR, wouldn't it?
      - cryptonym 1mo ago
        IANAL but it looks like they saw a risk and decided to not put you, as a website owner using their free tier, at risk of breaching GDPR for RUM. That was my concern and it's addressed.