I feel this needs to be repeated 🍪

The annoyance of cookie banners
doesn't come from the regulations, but from the malicious compliance of the corporations who want to exploit your personal data.

No data-harvesting cookies = No banner.
Simple.

My websites have no cookie banners,
because they don't use any non-essential cookies and don't track visitors.

Yours shouldn't either.

#Privacy #Cookies #PrivacyLaw

@Em0nM4stodon stupid question from a non-expert, but where do analytics fit into this? Not the "we want to analyse what you're buying" kind but the "how do you use our site" kind. Because I've noticed even government sites use the banner and presumably they don't sell your data.

I'm tangentially involved with building a public sector web portal, and we would like to understand if and where users struggle with the service. Or is that not done with cookies and/or would those class as essential?

@thecasualcritic
> we would like to understand if and where users struggle with the service. Or is that not done with cookies and/or would those class as essential?

Yes, is the short answer.

If the party who controls the website wants information about how the site is used, they have full access to the logs that are recorded by the site while each visitor is using it. GDPR has nothing to say against that, go digging through your own site logs as much as you like.

@Em0nM4stodon

@bignose that is only true if you do your own server side tracking. If you send the data to Google for doing this you need the banner. Google analytics is a third party and non essential.

@demiurg
> If you send the data to Google for doing this

Yes, and that counts as not having control over your own analytics.

The correct solution to “must I warn my users, if I send their data to surveillance corporations?”

is: do not send your user's data to surveillance corporations.

@bignose I absolutely agree!