logoalt Hacker News

buzerlast Wednesday at 2:24 AM4 repliesview on HN

"You DON’T need consent for: First-party cookies used just for your own analytics (in most cases)"

They claim that, but the page they link to as the source says "You must...Receive users’ consent before you use any cookies except strictly necessary cookies.". So what exactly makes them think that first-party analytics cookies are "strictly necessary"? The Mastodon link in the at the start of page doesn't seem to work.


Replies

Aloisiuslast Wednesday at 3:47 AM

Case and point, the EU Data Protection Board has a cookie consent banner and only uses a first-party cookie for analytics.

https://www.edpb.europa.eu/concernant-le-cepd/mentions-legal...

show 1 reply
gamblor956last Wednesday at 3:01 AM

Exactly. Analytics is one of the types of data for which permission is explicitly required.

Session auth cookies are the only ones the EU considers strictly necessary.

show 1 reply
krageonlast Wednesday at 11:30 AM

Anyone that says the quote is the case doesn't know what they're talking about. For the love of god, just read the law text :(((