Comment by thefourthchime

2 years ago

I just did this responding to another comment. My late night / slightly drunk brain wanted to know:

"What is that annoying thing where I have to click on on all the websites. Because of cookies and Europe"

Google: Links to things full of SEO and ads and maybe answer the question eventually.

ChatGPT: The "annoying accept" button you often have to click on websites, particularly in Europe, is related to the General Data Protection Regulation (GDPR). The GDPR is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area. It also addresses the transfer of personal data outside the EU and EEA areas.

Websites are required to get your consent before they can store or retrieve any information on your device, such as cookies. Cookies are small data files used to remember your preferences, login information, and browsing history. The GDPR mandates that websites must inform users about the cookies they use and obtain their consent before placing these cookies on their devices.

This is why you see those cookie consent notices – websites are legally obligated to ask for your permission to use cookies, and you must actively agree to it, usually by clicking an "Accept" button. This process aims to protect your privacy and give you more control over your personal data online.

Every time I see people proud of ChatGPT all I see is it being wrong. Is this really what people are so hyped about?

Cookies are fine if you're just storing user preferences, no banner needed if the only type of localStorage/Cookie banner you have is a purely functional one that doesn't serve tracking purposes. Github for example doesn't have a cookie banner as far as I remember, but they're definitely using various cookies.

It's the wrong answer, though.

Websites are required to get your consent before they can track you. Storing cookies or other information is totally fine if it is purely functional, for example a login session or dark mode preference. Similarly, tracking without consent is also forbidden if they do so without using tracking cookies.