Why do you need this if you don't use analytics or store anything but a session? It looks like the GDPR and CCPA don't require a notice or consent for session cookies, shopping carts, or similar features that are strictly necessary to provide functionality the user is intentionally accessing.
this post was submitted on 05 Dec 2024
12 points (80.0% liked)
Privacy
32442 readers
773 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
The last thing on earth I want is some random troll ripping me off for a free open source project because of whatever law that I don’t understand, so I have to put something to be GDPR complaint
If you're only storing strictly necessary cookies then you just need to link to a cookie policy somewhere - no popup banner needed.
Strictly necessary cookies — These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site. Cookies that allow web shops to hold your items in your cart while you are shopping online are an example of strictly necessary cookies. These cookies will generally be first-party session cookies. While it is not required to obtain consent for these cookies, what they do and why they are necessary should be explained to the user.
https://gdpr.eu/cookies/
Here's a nice example of a cookie policy:
https://legal.lemmy.world/cookie-policy/
Thanks! Yeah that should be enough and actually smart idea to check what lemmy is doing!
As mentioned before, you don't need a cookie banner. You could simply inform, that you don't collect data other than necessary session data.
A simple banner that informs that you don't do those things and a cross or a button to click it away. And that's more than you have to do to follow GDPR, in your case.