We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 34067 ☆ A M B ☆
    • 7 Posts
    Any simple ideas for implementing a process on Modx to provide compliance to the new cookie policy?

    How are you going about this?

    Bill.
      • 9995
      • 1,613 Posts
      Yea i also was wondering. I have seen a couple of solutions on (non modx) sites.

      Like on this dutch site, (the orange line)
      http://www.publiekeomroep.nl/specials/cookiewet

      it should save a cookie so it disapeares when u have accepted.


      // At the moment i'm checking this: http://silktide.com/cookieconsent

        Evolution user, I like the back-end speed and simplicity smiley
        • 9995
        • 1,613 Posts
        One thing i don't get, when a visitor enters the website they get a google analytics cookie, or will it hold the cookie untill it is allowed?
        [ed. note: fourroses666 last edited this post 14 years, 3 months ago.]
          Evolution user, I like the back-end speed and simplicity smiley
          • 9995
          • 1,613 Posts
          Here are some u can choose:
          http://www.predictiveintent.com/2012/02/cookie-law-solutions/




          [ed. note: fourroses666 last edited this post 14 years, 3 months ago.]
            Evolution user, I like the back-end speed and simplicity smiley
            • 34067 ☆ A M B ☆
            • 7 Posts
            Silktide, a good link, I will check this one out.

            I have read most of the Cookie Policy requirements, I am not a lawyer but my take is that you can have all of the cookies on the website as long as you tell the user what you are using the cookies for.

            Then you give them the option to turn cookies off, either by sending them to a page with instructions for their browser, or if you have a clever app, it turns the cookies off for them.

            The challenge is, how do you record that you have told them and that they accept the use of cookies
            on your website. If there was a dispute in the future, you would probably be asked to prove that they accepted / agreed to your cookies.

            We have many customers and are looking for a slick / proficient solution to deliver across all of the websites.

            Silktide might be the answer.

            Thank you.
              • 36926
              • 701 Posts
              @fourroses666 thanks for the Silktide links, this looks nice.

              The way i've been doing it is having a snippet just to see if the user has accepted cookies by looking for a cookie saying they've accepted.

              If it doesn't exists render out some html which is the banner with cookie info on it and a button to accept cookies which will then set the accepted cookie so next time this won't render out.

              The banner also stats that by using the site you're accepting the terms and the above snippet also has a bit of JS to set the cookie if any link is clicked apart from more info on cookies one.

              I also have a snippet that renders out google cooke if the accept cookies is present.

                • 40447
                • 165 Posts
                Hi, I posted this on another forum some time ago but I guess It will serve here as well.

                Since May 26 in the UK and June 5 in the Netherlands Website owners
                must declare cookies in a visible way, by law, used on visitors of their websites.

                So far the new cookie law only applies in Europe and if I am correct also
                to websites hosted outside Europe but targetting European visitors.

                According to the new cookie law, website visitors must be informed :

                1. about the cookie policy of the website they are visiting,
                2. how cookie data is, or is not used as information about a visitor,
                3. how a visitor can choose on the website they are visiting
                to agree or disagree, to turn off cookie usage. (optout)

                So, are we going to inform our website visitors about these 3 points each by our selves,
                using our own texts, creating or looking for third party scripts (jquery), etc, etc. ?

                Or are we going to host our websites outside of the EU to avoid all of this ?

                Anyway, so far the majority of websites, even a lot of government websites,
                are not in compliance with the new cookie law. But will it stay like this ?
                Are we going to wait and see what happens ? Not such a good idea.

                Using pop-ups isn't such a good idea since a lot of browsers already block pop-ups.
                Another way would be using a small light box that comes over the website and doesn’t
                go away until you click ‘yes’ and accept the cookies, but this is just going to annoy
                a lot of people. A better way would be to display the policy higher up the page.
                For example in the header or just somewhere that’s more visible for people to actually
                see your cookie policy.
                Brian.
                  • 9995
                  • 1,613 Posts
                  Thanks for ur info.

                  I'm now using Cookie Control http://www.civicuk.com/cookie-law/index.

                  Do u also have to show the cookie names being saved?
                  I have seen this on a site.
                    Evolution user, I like the back-end speed and simplicity smiley
                    • 28120
                    • 380 Posts
                    Don't bother with it.

                    Even David's not bothered http://www.number10.gov.uk

                    All you need is a prominent cookie policy (see header) http://www.number10.gov.uk/privacy-policy and it's implied consent; the rules got relaxed http://www.guardian.co.uk/technology/2012/may/26/cookies-law-changed-implied-consent.

                    Someone should tell David that Google Analytics is in fact a 1st party cookie.

                    Also it was a bit rubbish that to comply with the cookie ploicy you had to introduce a cookie to determine whether to show the pop-up warning on cookies.
                      • 28042 ☆ A M B ☆
                      • 24,524 Posts
                      This whole balagan was about otherwise pointless cookies set by ads (or the page owner for that matter) that stores user data intended for tracking and profiling the user for advertising and other similar tracking functions beyond the purpose of maintaining state between pages on the site, such as for session files or shopping carts. Really, what business is it of anybody (Google? Facebook? Twitter?) what sites I visit, and what pages on said sites I visit?

                      Unfortunately you get people all excited over the issue who have no idea how it all works, so they start using a shotgun approach that ends up throwing out the baby with the bathwater, if I may mix my metaphors.

                      Personally, I have all cookies deleted when I close my browser except for a few exceptions where I want a remembered login. After all these years, I still only have three exceptions, and all three of them are subdomains of modx.com.
                        Studying MODX in the desert - http://sottwell.com
                        Tips and Tricks from the MODX Forums and Slack Channels - http://modxcookbook.com
                        Join the Slack Community - http://modx.org