Re:List of Websites not available in the EU because of GDPR
by Asooka on Wednesday August 08, 2018 @06:02AM
(#17714494)
When I see that I simply open the website in private browsing (in Firefox at least no cookies are shared between public/private), consent to all tracking, read what I want and close the window.
Re:List of Websites not available in the EU because of GDPR
by dspillett on Wednesday August 08, 2018 @09:39AM
(#17715803)
That doesn't help if the implementation is bad (as many are) and drops tracking cookies until out-out - your main session still get the tracking nuggets.
> in Firefox at least no cookies are shared between public/private
That is also the case for incognito/private/what-ever-they-brand-it mode in Chrom{e|ium}, IE, Edge, and I assume (though I haven't tested this myself at all) Safari and others too.
Though there are some clues that can leak from normal to private due to known bugs & edge cases in the browsers and common add-ons (like flash), search for "evercookie" to find some references about that, and there are other ways to fingerprint or track you which might be less reliable but still apparently work well enough for people to use them.
With a UI that deliberately makes it very cumbersome to opt out and very easy to opt-in with no obvious way (aside from clearing all browser cookies) to later change your mind...
> (required by EU law)
Contrary to what the sites imply, the pop-up is not required by law (I'm guessing you, sshine, are well aware of this, but the general public aren't). It could easily be an in-page (rather than over-page) or interstitial page politely requesting that we agree to the cookies being stored on later page views.
The request to opt-in is required by the law. The pop-up is required by the site's desire to make it inconvenient for you not to.
> (required by EU law)
While we are on the subject of the law: the way many sites implement the consent walls is not compliant anyway. A common issue is storing data in tracking cookies until opt-out rather than not storing it until opt-in. The other common flaw is one is mis-classification of stored content: should that cookie for doubleclick.net really be classed as "essential for site operation"?!