logoalt Hacker News

lowercased • 01/22/2025 • 2 replies • view on HN

Not even sure you need any discreet notice about anything for strictly necessary first party cookies. That's my understanding of GDPR, at any rate.

Replies

arkh • 01/22/2025

You don't HAVE TO have a cookie banner for cookies which don't require consent.

Cookies not requiring consent :

  - "technical" cookies: for session, saving some user preferences (consenting to cookies or not, language etc.)
  - cookies used for load balancing or to protect against fraud
  - cookies used to save a cart or used to invoice some service
  - usage statistics cookies IF the data is anonymous
Also, the law is about trackers, not specifically cookies: so data in local and session storage are concerned as does browser fingerprinting.
➕ show 1 reply
martin_a • 01/22/2025

That's true. Strictly technically necessary cookies do not need consent or even information with a banner. Guess it's nice to know, but probably not legally necessary.

➕ show 2 replies