News for hackers. Stuff that matters.
Re:Ask HN: What is the least obnoxious way to ask for cookie... by BrandoElFollito on Friday September 29, 2023 @10:38AM (#37704982)
One of the problems is that it is hardly possible to differentiate connections without gathering PII.

Even an IP address is PII, your may be lucky with some fingerprinting, but this won't be unique.

Re:Ask HN: What is the least obnoxious way to ask for cookie... by starbugs on Friday September 29, 2023 @10:54AM (#37705181)
A cookie used solely for counting anonymous visits without storing individual identifiers generally wouldn't be considered personally identifiable information under GDPR.

At least that's what I was told. Having said that, this is obviously a complicated and nuanced topic with a lot of grey areas. I guess it's a good idea to talk to a lawyer in any case.

Re:Ask HN: What is the least obnoxious way to ask for cookie... by BrandoElFollito on Friday September 29, 2023 @01:08PM (#37707163)
You are right that if this is just a unique identifier that gets into the cookie and you cannot link it to the actual user then it's fine.

My point was rather for non-cookie based kind of identification, but it was no clear enough.