GDPR - Extension needed

1Dot

Justoverclock I think you can make something like that you did in Keywords extension Like at place of word take input as name for example Ramesh Script and in definition input you can take script or html used and now use the input Justoverclock here at the place of Google analytics and if the user unselect ramesh script then stop loading Ramesh Script and I have something great to share that only load script or css when user select anything you can use if condition here see the demo code below:

  if (r == true) {
          // Get HTML head element
        var head = document.getElementsByTagName('HEAD')[0]; 
        var script = document.createElement('script');
        script.src = 'RameshDadaPremiumScriptUrlForFREE'; 
        head.appendChild(script); 
}

Justoverclock

1Dot i have this already.

but i can't stop other services used by other extension, for example if u use malago/flarum-ads, or if u use another extension to load analytics.

1Dot

Justoverclock OK I promise I will remove all the other extensions once you will release this 😆 as I really want this

Justoverclock

1Dot the only things i can to is to remove all analytics and adsense on condition script from <head>, i will probably try to find a better solution in these days

luceos

Here's another privacy focused (but not free) alternative: https://usefathom.com/

Justoverclock remember that removing things from head won't remove data that has already been transferred.

MikeJones

Justoverclock the real things is that is impossible for my extension to stop (for example) all the adsense code if someone choose "no" to ads...because anyone use a different methods to display adsense....

You may not have to worry about it. Google adsense now has a feature that you can enable that asks users if they want to be tracked.

It's an experimental features you have to opt into as a web admin. I am trying it out now, you may or may not see the prompt on my website. It's shown up a handful of times for me....a step in the right direction.

[deleted]

MikeJones Tracking should be configurable at the browser level. I personally would never rely on nor trust Google to do anything related to privacy.

sylv38

Your extension looks great ! In my case, I don't use any analytics because of GDPR, the only thing I use is Pusher, because it's more comfortable with it. But I'm not sure to keep it because I don't have anything to let the user disalllow it. If you find a way to add Pusher to your plugin, I will definitly adopt it !

[deleted]

sylv38 I don't use any analytics because of GDPR,

You can still use them, but instead of Google Analytics, you should use Matomo who actually respect privacy.

Justoverclock

sylv38 pusher is part of Flarum, so can be included into the necessary cookies? [deleted]

[deleted]

luceos Thanks. Worth taking a further look.

[deleted]

Justoverclock Not really. It's not essential for Flarum to operate.

Justoverclock

I hope there’s a method to disable pusher with JavaScript. I will look into this also

MikeJones

For those interested here is what I was describing with adsense earlier:

https://support.google.com/adsense/answer/9930431?hl=en

[deleted]

For those interested, this is what non compliance looks like to a large firm like Amazon. All USD 885m of it.
https://www.inforisktoday.co.uk/amazon-hit-885-million-gdpr-fine-a-17190

010101

[deleted] Crazy. On one hand I don't feel bad for them, but on the other hand... that seems excessive. I wonder if companies get warnings or just suddenly, bam, here's a fine.

[deleted]

010101 No, that's not the case. In this instance, GDPR is typically 20m Euros in terms of a fine, or 4 times the annual turnover of the firm affected. It's highly likely someone has complained to the ICO directly and they have performed an investigation as a result.

streaps

[deleted] It's highly likely someone has complained to the ICO directly and they have performed an investigation as a result.

I'm pretty sure there are very good reasons for that huge fine. Looks like Amazon has a systemic problem and they were unwilling to fix it. Politico links to an article from February:
https://www.politico.eu/article/data-at-risk-amazon-security-threat/

ACCORDING TO THE TWO U.S. information-security employees, data is at risk because Amazon has a poor grasp of what data it has, where it is stored and who has access to it.

“If you wanted to do a 'right to be forgotten,' it would be next to impossible for Amazon to identify all of the places where your data resides within their system,” said the first former U.S.-based employee.
[...]
“Amazon has grown so fast, it doesn't know what it owns … They don't know where their data is at, so they don’t know if they are protecting it correctly,” the person said.
[...]
“The quality of the controls that Amazon has in place is appalling. We found hundreds of thousands of accounts where the employee is no longer there but they still have system access,”

Braden

@[deleted] we need to take that seriously. Chinese tend to say, Honey melons hang on bitter vines; sweet dates grow on thistles and thorns.

MikeJones

So Google just added GDPR pop up for users of adense which is kind of nice:

I enabled it but couldn't see it on my site... Maybe it's because I live in the United States? Also may not show due to similar bugs related to adsense in Flarum Ad Extension

010101

Everything has a cost. For whatever reason this just came to mind.

I like privacy. And so, I like the idea of these laws.

However, once your company is big enough to be a target, you probably need to hire full time lawyers and privacy experts just to handle GDPR. Plus, all the money you put into paying for website redesign and GDPR tracking/tools.

This means, a widget you used to sell for $50, is now $100 to offset all the extra stuff you’re having to do.

GDPR also means we are full of pop ups, banners, checkboxes, reminders, and so on and so forth.

Since all of this GDPR stuff I don’t use the Internet any differently. It feels like it was designed more for people who don’t know what a cookie is. If they didn’t know before, they still won’t know if there’s a banner in their face. It’s just more to click through to get to what you want.

poVoq

010101 GDPR also means we are full of pop ups, banners, checkboxes, reminders, and so on and so forth.

This is actually not fully true. The GDPR is written in a way that it still allows a lot of user-tracking if the user consents to it. If your website does not do any user-tracking you don't need any of those pop-ups etc. IANAL just a public link to your privacy policy in the footer is sufficient.

So what I am trying to say is... those annoying pop ups etc are only showing you that these websites have not changed at all, they are just now forced to inform you about their data abuse.

« Previous Page Next Page »