Hacker News new | ask | show | jobs
by JulianWasTaken 2697 days ago
I'm not sure what you mean be "that's just how context works", but perhaps to illustrate the disconnect, it is just as incompatible with GDPR to share the page URL itself, let alone data derived from it like the page category. Doing so is sharing user data in a way that is not consented to.

I don't know what you mean to say about the cookie either, the whole point of this kind of advertisement is to persist associatable data about a person for the lifetime of the cookie.

1 comments

Page URL is not personal information, that's a ridiculous overreach and misinterpretation of GDPR.

Cookies are an anonymous identifier, they are specifically not a person. As I said, it's a short-term stable ID used to control the amount of ads shown and track any conversions for campaigns. Adtech companies do not know who you are, only Google and Facebook do.

You're incorrect, or at least that's what this complaint claims, and I personally have been expecting it for awhile.

The fact that cookies are pseudonymous has 0 effect here -- literally their entire purpose is to be able to associate third party data with a person's browser.

Your contention that all they're used for is frequency capping isn't true either, but even if it was, it's not relevant -- "I'm just using it for frequency capping" isn't acceptable under the GDPR, just as much as "I need the data to do advertising" isn't a reason acceptable under the GDPR for keeping a piece of data in the first place.

Here's the text of the GDPR on cookies: https://gdpr-info.eu/recitals/no-30/