[fwlr]

For me personally, I haven’t figured out whether I care or not about cookie privacy, because I’m too traumatized by the absolute fucking UX catastrophe that is “legally mandated modal/large banner on first visit to any site”. A modal is a pop-up window for the SPA age. We hated pop-ups so much that we took it to court trying to make it illegal, with judges in most jurisdictions settling on something close to “no, pop ups aren’t illegal, unless they’re coercive or misleading”.

And now it’s illegal to not have a popup. Every site is legally obligated to hit every user with one of the all-time most hated UX experiences ever.

[dspillett]

> And now it’s illegal to not have a popup.

It absolutely isn't. You, along with many others, are falling for the advertising industries attempts to turn you against privacy regulations by claiming the regulations force them to inconvenience you.

In fact a great many of the pop-us (the vast majority) are actually in breach, deliberately so, because they make it far more work to opt out than to opt in.

If all you track by default is tokens required for correct functioning of the site (session tokens and such) then you do not need a pop-up at all.

[fwlr]

I’m not “falling for the advertising industries attempts”. You’re missing my point, which is that the law specifies you must use a particularly atrocious UX pattern.

[dspillett]

I am not missing your point. I am asserting that your point is incorrect. Show me where in a law/regulation where anything like that is stipulated.

IIRC all that is stipulated in the EU regs, for instance, WRT cookies and other tracking tech is the ability to opt-out should be as easy as the ability to opt in, it should not be auto-opt-in, you can opt-out later if you do opt-in, and you should be properly informed about what you are opting into.

The bad UX patterns making it time-consuming, confusing, or otherwise unpleasant, to opt-out are actually against the spirit of the law (perhaps even the letter of the law) but unfortunately it is not proving really practical to enforce.

[_piif]

They aren't legally obligated to make opting out as painful of a process as possible by presenting you a gazillion individual options and then some kind of loading spinner while they "Process your request" for half a minute as an extra "screw you". When that happens I just bail out as that shows just how little respect the site owner has for their visitors.