GDPR extensions

OddDev

Hey,

I want to create GDPR extensions for Flarum. What I wanna do is creating a group on Github called Data Knights of Flarum (DKoF) and provide two extensions.
The first one is a cookie layer. It informs users that cookies are used and they need to accept this.
The second one is an extension to make it mandatory for new users to accept a data protection agreement. It will issue a checkbox to the login. The label of it has a link to the data protection agreement (which is a post in Flarum?). If the user does not tick this check-box, the sign-up will not work.
Sounds like a plan?

OddDev

Oh, btw, I'm a little bit unsure how to set up a development/debuggin environment. If I follow the contribution guide I have some things running but not really a local server to debug anything.
On the other hand, when I follow the extend Flarum guide, it does not provide on how to set up an environment at all.

[deleted]

OddDev The first one is a cookie layer. It informs users that cookies are used and they need to accept this.
The second one is an extension to make it mandatory for new users to accept a data protection agreement. It will issue a checkbox to the login.

Hi - you're aware that these already exist ?

https://discuss.flarum.org/d/10395-cookie-consent/15
https://discuss.flarum.org/d/11714-flagrow-terms-ask-your-users-to-accept-tos-and-privacy-policy/92

brian85

[deleted] Flagrow terms is not really complete regarding the law there is one feature that is missing, users should be allowed to get back all his datas, so the admin or the user should have a button to export a zip.

cookie consent is not complete because you should be allowed to decline the cookie consent.

OddDev

Oh. Well. That's embarrassing.
Thank you! 😁

[deleted]

OddDev no problems

[deleted]

brian85 True, and that's why I still have my main site that also encompasses the forum. Admittedly, it won't allow you to opt out, but I've stripped back everything but the absolute essentials for Flarum to run.

clarkwinkelmann

brian85 users should be allowed to get back all his datas

I don't think that's something we absolutely have to provide in an automated way ?

True, it would be helpful to have this as a one click, but I believe you can still be GDPR-compliant by doing it by hand on user request.

As the name suggests, Terms was only designed to handle that one feature. The other features will probably available as other extensions in the future.