Hacker News new | ask | show | jobs
by dspillett 1119 days ago
This is a good use of a session cookie. Or even a stored cookie.

It would be considered a non-tracking essential site function value too, so you wouldn't need to beg permission (contrary to what people who want us to be against privacy legislation will claim), and the site is probably already asking for permission anyway for other reasons so even that point is moot.

2 comments

Unfortunately "non-tracking cookies" are no longer a thing in most browsers.
I was meaning non-tracking essential cookies, as defined by privacy legislation that requires permission for things that are not essential for site features.

Or are you suggesting mainstream browsers are blocking same-origin session-level cookies by default now? I'm not aware of any. And if you have a browser that is blocking such things, the worst that will happen is the current behaviour (repeated mis-guesses because the preference isn't stored) continues.

Safari drops first-party cookies (and all other storage) on sites that have not seen interaction in 7 days.
This is not entirely accurate. It's only script-writable storage. HTTP cookies are not removed.

I'm not defending Safari's policy, by the way, just describing. I think it sucks, and a conspiracy theorist might note how it favors native apps over web apps.

Thanks for the clarification!
Needing to re-override the incorrectly detected mobile/not upon return after a full week away will be massively less annoying than needing to do it every new page request, so that shouldn't be problematical.

That Safari does this is useful information that I may need to warn users of one of my projects about, as it means intentionally offline data has a much shorter expiry date than on other platforms.

Wouldn't this log you out of everything?
Everything you've not visited in the last seven days, yes.

Things you touch regularly should be fine.

And apparently it only affects mass local storage, not cookies which are most often used for season management (so you might stay logged in but the app need to reset data previously called in local storage).

how would a cookie help with better auto-detection? to store the platform, maybe, but how do you determine whether the user wants a mobile/desktop version to begin with?
It doesn't help the detection, it means that the override when the detection fails is remembered so the site knows to just pick a particular version instead of using the detection method at all.

It is a work-around improving the UX on the second and subsequent requests, not a fix for the root cause.