Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is a common misconception with the "EU cookie prompts".

The EU does not require the use of "cookie prompts".

User consent is required to process a user's data for certain purposes+.

That may involve the use of a cookie, or it may not.

Whatever technological methods you use to process the user's data, and regardless of whether it happens on the client or server, you must ask for consent.

Having a system where cookies are not remembered between sessions would be no use, as the user's consent would still be needed while those cookies were set.

+Not everything needs consent, but things like tracking for advertising or analytics typically does. Even if you do it via IP address or local storage, you need to ask for consent - nothing to do with cookies.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: