Ask HN: Why does every website ask me to accept cookies?
It feels like every site (few exceptions) now throws up a big banner or modal demanding you “accept cookies”. The whole process impedes usage of the site.
18 comments
Because the EU is too dumb to realize the User Agent can already deny cookies.
> https://gdpr.eu/cookies/
> To comply with the regulations governing cookies under the GDPR and the ePrivacy Directive you must: Receive users’ consent before you use any cookies except strictly necessary cookies.
It's a compliance thing. It's worse if you're in the EU, but the internet is global so it affects everybody, these days.
The old uBlockOrigin (which Google depreciated) had an auto-decline, so I didn't see one of those cookie banners for years... the new Lite version, however, doesn't seem to have that feature.
> To comply with the regulations governing cookies under the GDPR and the ePrivacy Directive you must: Receive users’ consent before you use any cookies except strictly necessary cookies.
It's a compliance thing. It's worse if you're in the EU, but the internet is global so it affects everybody, these days.
The old uBlockOrigin (which Google depreciated) had an auto-decline, so I didn't see one of those cookie banners for years... the new Lite version, however, doesn't seem to have that feature.
> which Google depreciated
The Firefox version works just fine.
The Firefox version works just fine.
I thought you only need to do that for tracking cookies?
If you have essential cookies that need to remember what a user saved to their shopping cart, if they want dark or light mode, their login session, do you need them to consent?
If you have essential cookies that need to remember what a user saved to their shopping cart, if they want dark or light mode, their login session, do you need them to consent?
It's because all of these sites have stuff to track you and cookies is one of the ways you can do that.
AdGuard is also very effective on Safari for iOS.
There should definitely be a standard API for this stuff by now allowing browsers to control the cookie experience. Maybe we're moving in that direction, I'm not sure. I think there was a feeling the law would be rolled back so there was no major push to standardise things
This is done in an effort to comply with what is commonly called "cookie law" (GDPR + ePrivacy directive).
Those texts don't say anything about cookie banners, though, only that users should be informed and have the possibility to make a choice. How that information and ability to make a choice are presented to the user is left to the site owner to decide.
For site owners, cookie banners are an easy way to comply without having to DESIGN that compliance into their site, which can be interesting but time consuming and expensive.
In theory, it should be possible to prompt the user for consent before storing something on their device but that would only work for stuff site owners have control over.
In practice, "cookies" are rarely used voluntarily by the site owners themselves but they are used a lot by the crap they add to their sites for tracking and so on via tag managers. And for that there is no better solution than a blanket cookie banner.
Those texts don't say anything about cookie banners, though, only that users should be informed and have the possibility to make a choice. How that information and ability to make a choice are presented to the user is left to the site owner to decide.
For site owners, cookie banners are an easy way to comply without having to DESIGN that compliance into their site, which can be interesting but time consuming and expensive.
In theory, it should be possible to prompt the user for consent before storing something on their device but that would only work for stuff site owners have control over.
In practice, "cookies" are rarely used voluntarily by the site owners themselves but they are used a lot by the crap they add to their sites for tracking and so on via tag managers. And for that there is no better solution than a blanket cookie banner.
Because the marketing people want tracking scripts (GTM) that set cookies, and the developers don't have the power, knowledge, or desire to push back and stop them.
The EU mandated it, and it’s easier for the websites to display it globally, so that’s what they do.
That's a very misleading way to phrase it. The EU didn't mandate these banners. The EU mandated getting permission from users before a site can use tracking cookies. Sites that don't use those kinds of cookies don't need to do a thing.
Sites started putting the banners up in part because they didn't want to stop tracking users, and in part to make things annoying enough to users to try to get people angry about efforts to help people protect themselves.
Sites started putting the banners up in part because they didn't want to stop tracking users, and in part to make things annoying enough to users to try to get people angry about efforts to help people protect themselves.
The EU now resembles someone who masters theory but consistently fails in practice.
Corollary, is there an add on for firefox to always set only essential cookies?
I think the question is "why do sites put up cookie banners when the only option is Accept?" Gdpr requires an option to opt out, so who are they try to appease here? I sometimes think they do it because people have come expect them.
Because, the law
Has any website owner ever been sued for using cookies without consent? Yes it seems like madness and utter stupidity.