21 Matching Annotations
  1. May 2020
    1. Shouldn't I be adding the names of the cookies my site/app is using? The specific names of cookies don't provide users with information they can understand. Regarding cookies installed by third parties: the site owner is not in direct control of these cookies. This results in the naming and future changes to naming conventions also being outside of the owner's control and therefore also duty for disclosure. Due to this, we describe the cookies by their purpose and we give users all the instructions they need in order to understand cookies and manage them in their browsers. Then we link to the privacy/cookie policies of any third parties used by your site and we reference their opt-out pages, when available. This concept is the result from consultations with countless privacy attorneys, feedback from privacy authorities and the interpretation of the law itself.

      This sounds like a reasonable compromise.

      Like they say, listing specific names of cookies isn't helpful or practical/maintainable for perpetuity:

      The specific names of cookies don't provide users with information they can understand. Regarding cookies installed by third parties: the site owner is not in direct control of these cookies. This results in the naming and future changes to naming conventions also being outside of the owner's control and therefore also duty for disclosure.

  2. Apr 2020
    1. You can change your browser settings to refuse cookies and delete them at any time. If you continue to use this site without taking action to prevent the storage of this information, you are effectively agreeing to this use.
  3. Mar 2020
    1. In general, the directive does not specifically require that you list and name individual third-party cookies, however, you are required to clearly state their categories and purpose. This decision by the Authority is likely deliberate as to require such would mean that individual website/app owners would bear the burden of constantly watching over every single third-party cookie, looking for changes that are outside of their control; this would be largely unreasonable, inefficient and likely unhelpful to users.
    2. a broader explanation of the way cookies operate and of the categories of cookies used will be helpful. A description of the types of things analytical cookies are used for on the site will be more likely to satisfy the requirements than simply listing all the cookies you use with basic references to their function.
    3. The cookie policy must: indicate the type of the cookies installed (e.g. statistical, advertising etc.);describe in detail the purpose of installation of cookies;indicate all third-parties that install or that could install cookies, with a link to their respective policies, and any opt-out forms (where available);be available in all languages in which the service is provided.
    1. provide users with information regarding how to update their browser settings. Many sites provide detailed information for most browsers. You could either link to one of these sites, or create a similar guide of your own. Your guide can either appear in a pop up after a user declines consent, or it can be part of your Privacy Policy, Cookie Information page, or its own separate page.
    1. Vimeo We use Vimeo for video display. Read more Name Retention Function Statistics __utmt_player 10 minutes Track audience reach vuid 2 years Store the user's usage history Sharing For more information, please read the Vimeo Privacy Policy.

      I like how it groups cookies by the site/service that sets them, and has links to more information and privacy policy for each of those services.