This is not ok - Lemmy

Saw this today and now I’m reconsidering if Boost is right for me. I’m really hoping this is shitty boiler plate that was accidentally copied and over looked because that is some bullshit to say “unless we decide we want to use your personal data for whatever we want”. I know “legitimate interest” is a phrase from the cookies law but there is no legitimate interest justification for this. My data is my data and advertisers can fuck off, as can Boost if this the direction it’s going.

Dev here.

The dialog and its content is not created by me, it is a standard solution from Google to comply with GDPR and other laws. More info here: support.google.com/admob/answer/10114014?hl=en

The consent dialog is also required by Google AdMob to show ads, and it is shown when the ad network is initialized.

When the app launches, first it checks for the remove ads purchase, and if it is not present, it will initialize the ads sdk. The ad network is not initialized if the remove ads purchase is detected.

Boost for Reddit was using the very same ad networks and consent dialog.

You better keep an eye out, then; your app may be in legal violation of the LGPD and GDPR.
How? Could you at provide a credible cause?
Article 2 of the LGPD already gets him: consent is autodetermined, i.e. only the user can define whether or not the data may be kept (except in very specific circumstances which do not apply)

You forgot article 10.

Art. 10. Controller’s legitimate interest can only be grounds for processing personal data for legitimate purposes, based on particular situations, which include but are not limited to:

I – support and promotion of the controller’s activity; and

II – protection of data subject’s regular exercise of her/his rights or provision of services that benefit her/him, subject to her/his legitimate expectations and fundamental rights and freedoms, in accordance with this Law.

§1 When processing is based on the controller’s legitimate interest, only the personal data which are strictly necessary for the intended purpose may be processed.

§2 The controller shall adopt measures to ensure transparency of data processing based on her/his legitimate interests.

§3 The national authority may request of the controller a data protection impact assessment, when processing is based on her/his legitimate interest, being observed commercial and industrial secrecy.

Are you seeing a clause stating previous dispositions may be voided in there? Because I am not. I.e. the previous terms still apply (made explicit in the entirety of chapter I).