We and our
908
partners store and access personal data, like browsing data or unique identifiers, on your device.
Absolutely, we need a Reject All button!
News and information from Europe πͺπΊ
(Current banner: La Mancha, Spain. Feel free to post submissions for banner images.)
(This list may get expanded as necessary.)
Unless they're the only sources, please also avoid The Sun, Daily Mail, any "thinktank" type organization, and non-Lemmy social media. Don't link to Twitter directly, instead use xcancel.com. For Reddit, use old:reddit:com
(Lists may get expanded as necessary.)
We will use some leeway to decide whether to remove a comment.
If need be, there are also bans: 3 days for lighter offenses, 7 or 14 days for bigger offenses, and permanent bans for people who don't show any willingness to participate productively. If we think the ban reason is obvious, we may not specifically write to you.
If you want to protest a removal or ban, feel free to write privately to the primary mod account @EuroMod@feddit.org
We and our
908
partners store and access personal data, like browsing data or unique identifiers, on your device.
Absolutely, we need a Reject All button!
And it should include this mysterious 'legitimate interest', or whatever it is called - always on by default in 'my choices', even though no one seems to be able to explain what this means. How can I make an informed consent on something that vague?
On the other hand, not 'Reject All', but 'Reject All except functionally necessary' (which should be precisely regulated by the law), otherwise there will be no cookie to remember our 'reject all' choice, which I am sure the corpos would happily use do discourage us from clicking that.
That shit makes me so mad. What the fuck is legitimate interest if not the cookies which are set anyway to make the site function Itβs just purposefully misleading.
I'm sure "functionally necessary" already means we share your data with everyone because we setup a system where the local page state is managed by third parties that we are selling your data to.
Rejecting cookies without asking every time requires a cookie and that is clearly legitimate interest. The problem with legitimate interest is that it's not well defined enough and then you have companies claiming that Adsense personalization is an absolute necessity for their website.
the "functionally necessary" cookies, which are served by the site itself (e.g. not a third party), do not require a banner at all. if you have no third party cookies, you can do entirely without it.
I have also seen on some websites that you have to pay them through subscription if you want to reject all cookies
Pretty sure that's illegal AF. Report them?
Will do when I encounter any more
Literally saw one with 1300+ the other day, thought I was going insane π³
Can we ban the "Pay to have privacy" option as well.
Fuck every site that tries to pull that shit.
Pay or OK is banned.
It's not banned. Meta isn't allowed to use that option, because it has monopoly power. IE in the view of the court, you can't avoid using Meta. For any ordinary site, there is always the option to refuse either and leave.
The irony made me exhale a burst of air from my nose before closing the page, never to return.
Basically every cookie acceptance agreement popup is just a 404 to me. No webpage has important enough information anymore for me to sign any kind of agreement. It's absurd. If you passed by a shop and wanted to go in and purchase something, but a clerk stopped you at the door and made you sign a fucking agreement that store would die in a month.
Heh
Heise Group, you greedy cocks.
Here's a version of that article that doesn't deliberately ~~break~~ skirt as far as legally possible EU privacy law: https://archive.ph/ZTt3K
Heise is not breaking EU law with this. The law states that there must be an option to reject all cookies, whether it's a paid option or not is up to the site.
~~This is no longer true thanks to a ruling by the European Data Protection Board.~~ Hang on, I was misreading. I believe there's been a recent ruling, but this one ain't it.
EDIT: See pages 39 and 40. ~~Here, it seems as though no "equivalent alternative" is provided under these criteria. It seems to me like consent-or-pay is heading toward an eventual ban, but Heise makes it clear on their website you can consent, pay, or leave β i.e. not an "equivalent alternative" to my mind.~~
EDIT 2: Okay, upon reading these criteria further, it seems like this isn't a violation of EU law but that it's reaaaally close and that the EDPB really hates consent-or-pay as a loophole and wants it to die as soon as possible. If not breaking the law, it's still an ethical nightmare, so the first line of my comment stands: "Heise Group, you greedy cocks."
so the first line of my comment stands: βHeise Group, you greedy cocks.β
Fair enough :D
The kind of stupid shit societies have to invest money in. Don't get me wrong, it's good news, it's just baffling that money had to be invested in order to get these bastards to do the civil thing.
'its baffling in a capitalist society, corporations do everything they can to squeeze the most money out of their users with zero regard for the users wants or needs, and do whatever they can to skirt legal obligations that protect consumer privacy and security'
Yeah. I'm baffled.
Fuck you pieces of shit.
Go track this:
I usually just do this:
A disgusting behavior that I've seen in Spain is for websites to direct you to their subscription page if you say you don't want to be tracked, either you pay for the content or you don't get any content. Apparently the Spanish courts have deemed this legal.
If you use uBlock Origin, add the following rule:
* privacy-center.org * block
This kills 99 % of the "accept or pay" modals, an you can still access the page normally.
Also, require its html tag to have an attribute "data-legal-reject" or something like that so we can have browsers auto reject all that shit - while keeping necessary ones.
Better yet, attach this at the protocol level. "X-Cookie-Policy: ImportantOnly" or something like that.
Yeah, thereβs no reason why this should be anywhere except the browser level.
Make it opt-in where you must purposely click somewhere. And just hide that away where they have their unsubscribe button.
afaik the wording of the gdpr says that rejection must be as easy as acceptance
Not just "as easy" but "at least as easy". The assumption should be that the user does not consent. And there have also been a few cases where the courts have - quite rightly - rules that "pay for privacy" offers aren't good enough.
Cookie banners need to piss off forever. You may set some functional cookies only if I log in.
FINALLY! I was wondering how long it'd take for people to act upon the fact that Permission prompts have become THE biggest digital grift. The answer: way too fucking long!
I recently started to use "I still don't care about cookies". So far so good.
The issue about that extension is this:
When it's needed for the website to work properly, it will automatically accept the cookie policy for you (sometimes it will accept all and sometimes only necessary cookie categories, depending on what's easier to do).
It will often just accept the cookies as is.
This and Consent-o-matic
You wonder, why do they not just make it illegal to use cookies at all (other than for legitimate purposes like loggin in).
Who actually wants to accept?
As much as i would love to see that, youll be burning down a multi-billion, if not trillion, worth market.
Also, idk if i want the alternative of cookie tracking to be used as much as cookie tracking. Scary stuff
youll be burning down a multi-billion, if not trillion, worth market.
Oh no
Also, idk if i want the alternative of cookie tracking to be used as much as cookie tracking. Scary stuff
Here's an idea, you outlaw that also
We have been in the wild west of the internet the last 20 years or so, and you wonder when we're finally going to actively police it
A friend of a friends relative's 2nd cousin mentioned that pornography sites have been surprisingly compliant about this, already.
As usual, this should have been the responsibility of browsers, not individual websites.