Hacker News new | ask | show | jobs
by IanCal 6 days ago
It’s not about cookies. It’s about what the site is allowed to do with your data. Cookies are an implementation detail.

It’s baffling we’re having this misunderstanding on this site in 2026 still.
1 comments
TurdF3rguson 5 days ago
Is there any other way to get that data? It's clearly about cookies but it's specifically about tracking cookies.
link
dredmorbius 5 days ago
Supercookies: <https://www.comparitech.com/identity-theft-protection/superc...> <https://www.eff.org/deeplinks/2009/09/new-cookie-technologie...> <https://www.eff.org/deeplinks/2014/11/verizon-x-uidh>

Browser fingerprinting / Panopticlick: <https://ssd.eff.org/module/what-fingerprinting> <https://panopticlick.org/>

On-device identifiers --- Google AdID (GAID), Apple IDFA, etc.: <https://developer.transmitsecurity.com/guides/risk/secure_de...> <https://geraguard.com/blog/how-device-fingerprinting-works-m...> <https://alejandrocordon.com/blog/2025/01/18/unique-identifie...>.

link
TurdF3rguson 5 days ago
Sure but these are all the same thing as cookies.

And BYW, browser headers can even be a violation if it's determined that you are using them for tracking users in a way that violates ePrivacy demands.

It's still a cookies thing.

link
IanCal 3 days ago
Browser fingerprinting is not cookies. Cookies are a very specific technical thing.
link
IanCal 3 days ago
GDPR is not about cookies, and what data do you mean? The data about how you use the site, tied to anything they can identify you with?
link