Hacker News new | ask | show | jobs
by rob74 894 days ago
But even if you only use your own cookies, you will still have to show one of those annoying cookie banners first...
2 comments

Only if you use the cookies to track users. Cookies like authentication and things needed by the website to work do not require the banner. And so I think Sentry did the right thing, one can go to sentry.io and browse without having this fugly banner to dismiss every time.
Authentication is the most reliable form of user tracking.
Sometimes I think the ad industry made up the misleading term cookie-banner. At least GDPR does not limit the technology used for collecting personal information. You still need to ask for consent if you track users with some other technology. Using cookies does not require consent under GDPR, collecting and sharing PII does though (if not necessary for the service to function)
It's the ePrivacy Directive (and not the GDPR) that prohibits storing any data on the user's machines unless they are a) strictly necessary to provide the service, or b) the user consents.
Thanks for the correction. But the point still stands. This isn't about cookies per se, but about not extracting value from a user beyond what the service needs when users do not consent.