[RFC] Cookie notice

Note: We are moving the topics of this forum and it will be deleted at some point

Publish your own request for comments/change or patches for the next version of phpBB. Discuss the contributions and proposals of others. Upcoming releases are 3.2/Rhea and 3.3.
User avatar
MichaelC
Development Team
Development Team
Posts: 889
Joined: Thu Jan 28, 2010 6:29 pm

Re: [RFC] Cookie notice

Post by MichaelC » Tue Aug 07, 2012 11:36 am

I'd say a seperate RFC for the german imprint but I don't see why not if you can find someone to develop it.
Formerly known as Unknown Bliss
psoTFX wrote: I went with Olympus because as I said to the teams ... "It's been one hell of a hill to climb"
No unsolicited PMs please except for quotes.

User avatar
Dragosvr92
Registered User
Posts: 624
Joined: Tue May 31, 2011 12:08 pm
Location: Romania
Contact:

Re: [RFC] Cookie notice

Post by Dragosvr92 » Tue Aug 07, 2012 6:47 pm

callumacrae wrote:If it is going to be that invasive and long, please have this option disabled by default.
I agree. I do not wish to add this on my forum. Its just a cookie. Doesnt do any harm.
If the user doesnt want the cookie, they can simple block cookies from your site.
Previous user: TheKiller
Avatar on Memberlist 1.0.3

User avatar
Pony99CA
Registered User
Posts: 986
Joined: Sun Feb 08, 2009 2:35 am
Location: Hollister, CA
Contact:

Re: [RFC] Cookie notice

Post by Pony99CA » Tue Aug 07, 2012 9:14 pm

Senky wrote:+1, also for dsiabled by default, but I would recommend adding this option also to installation process (you know, a lot of boards are located in EU ...).
Any "legal" type stuff should be done the same way -- COPPA, the EU cookie law, etc. Given how many different jurisdictions there are, it may be best not to try to deal with that during installation.

As I said, maybe we should have a "Legal Settings" section in the ACP to control COPPA, this cookie law, the German Impressum/Imprint law, etc. That way everything would be grouped together and easily located. The installation documentation could tell people to check that page for these things. (Yes, it may require a separate RFC.)

Steve
Silicon Valley Pocket PC (http://www.svpocketpc.com)
Creator of manage_bots and spoof_user (ask me)
Need hosting for a small forum with full cPanel & MySQL access? Contact me or PM me.

User avatar
imkingdavid
Registered User
Posts: 1050
Joined: Thu Jul 30, 2009 12:06 pm

Re: [RFC] Cookie notice

Post by imkingdavid » Tue Aug 07, 2012 9:59 pm

How about something as simple as:
"This site uses cookies. Click here for more info!"
Where "here" is a link to the privacy policy section explaining cookies (for which I still suggest the wording I used in the first post, or something similar).

And yes, an ACP setting would be a good idea.
I do custom MODs. PM for a quote!
View My: MODs | Portfolio
Please do NOT contact for support via PM or email.
Remember, the enemy's gate is down.

User avatar
MichaelC
Development Team
Development Team
Posts: 889
Joined: Thu Jan 28, 2010 6:29 pm

Re: [RFC] Cookie notice

Post by MichaelC » Tue Aug 07, 2012 11:32 pm

imkingdavid wrote:How about something as simple as:
"This site uses cookies. Click here for more info!"
Where "here" is a link to the privacy policy section explaining cookies (for which I still suggest the wording I used in the first post, or something similar).

And yes, an ACP setting would be a good idea.
Doesn't cover the legal basis I don't think. Theoretically you have to get consent but there is a type of consent (which I can't remember the name of) where its just having knowledge of something and choosing not to do anything about it when you could is consent to it happening.
Formerly known as Unknown Bliss
psoTFX wrote: I went with Olympus because as I said to the teams ... "It's been one hell of a hill to climb"
No unsolicited PMs please except for quotes.

User avatar
keith10456
Registered User
Posts: 523
Joined: Sat Apr 22, 2006 10:29 pm
Contact:

Re: [RFC] Cookie notice

Post by keith10456 » Tue Aug 07, 2012 11:36 pm

EXreaction wrote:Please make it an option configurable in the ACP (to display/not display the message)
Agreed (and disabled by default)...

User avatar
Pony99CA
Registered User
Posts: 986
Joined: Sun Feb 08, 2009 2:35 am
Location: Hollister, CA
Contact:

Re: [RFC] Cookie notice

Post by Pony99CA » Wed Aug 08, 2012 12:51 am

Unknown Bliss wrote:
imkingdavid wrote:How about something as simple as:
"This site uses cookies. Click here for more info!"
Where "here" is a link to the privacy policy section explaining cookies (for which I still suggest the wording I used in the first post, or something similar).

And yes, an ACP setting would be a good idea.
Doesn't cover the legal basis I don't think. Theoretically you have to get consent but there is a type of consent (which I can't remember the name of) where its just having knowledge of something and choosing not to do anything about it when you could is consent to it happening.
"Implied consent", maybe? The way I read the law required detailed explanation of non-essential cookies (including third-party cookies, like Google Analytics used by phpBB.com ;)) and a way to opt out of them.

Steve
Silicon Valley Pocket PC (http://www.svpocketpc.com)
Creator of manage_bots and spoof_user (ask me)
Need hosting for a small forum with full cPanel & MySQL access? Contact me or PM me.

User avatar
MichaelC
Development Team
Development Team
Posts: 889
Joined: Thu Jan 28, 2010 6:29 pm

Re: [RFC] Cookie notice

Post by MichaelC » Wed Aug 08, 2012 1:39 am

Way to opt out:
Built into browsers - Or -
Cease using the website
Formerly known as Unknown Bliss
psoTFX wrote: I went with Olympus because as I said to the teams ... "It's been one hell of a hill to climb"
No unsolicited PMs please except for quotes.

User avatar
Pony99CA
Registered User
Posts: 986
Joined: Sun Feb 08, 2009 2:35 am
Location: Hollister, CA
Contact:

Re: [RFC] Cookie notice

Post by Pony99CA » Wed Aug 08, 2012 2:05 am

Unknown Bliss wrote:Way to opt out:
Built into browsers - Or -
Cease using the website
Do a lot of browsers allow disabling JavaScript on a per-site basis, much less on a per-cookie basis?

Regardless, I presume that the lawmakers didn't want either of those all-or-nothing approaches.

And remember, the law isn't just about cookies, but anything non-essential downloaded (Web bugs/beacons, for example, would probably fall under this law). No, phpBB doesn't use those, but your first option would require disabling all images on a Web site that did.

Steve
Silicon Valley Pocket PC (http://www.svpocketpc.com)
Creator of manage_bots and spoof_user (ask me)
Need hosting for a small forum with full cPanel & MySQL access? Contact me or PM me.

User avatar
EXreaction
Registered User
Posts: 1555
Joined: Sat Sep 10, 2005 2:15 am

Re: [RFC] Cookie notice

Post by EXreaction » Wed Aug 08, 2012 4:25 am

Browsers don't generally make it easy to block certain sites from setting cookies...probably because they think it's ridiculous.

Post Reply