Comment by jarofgreen
1 day ago
> We did all the tracking on the backend
Just checking, you do know that still counts as tracking and may fall under GDPR rules? GDPR was never just about cookies.
1 day ago
> We did all the tracking on the backend
Just checking, you do know that still counts as tracking and may fall under GDPR rules? GDPR was never just about cookies.
I do but we shouldn’t be talking about cookies in our cookie banner then.
That's why the usual phrasing is some variation of "Are we allowed to track you? We use cookies for that".
It was never about the cookies themselves. That just happened to be the most common form of tracking in use when the GDPR was originally written. Cookie-less tracking still requires a consent prompt, tracking-less cookies never required one.
You’re conflating GDPR and the ePrivacy Directive. They _should_ work how people imagine they do.
> it was never about the cookies themselves.
The ePrivacy directive was about cookies. GDPR is about user consent and data handling - the cookie banner is from the ePrivacy directive.
> Cookie-less tracking still requires a consent prompt, tracking-less cookies never required one.
Where in the GDPR or ePrivacy directive does it say cookie less tracking requires a consent prompt?
And on tracking-less cookies not requiring one - that’s my entire point.