←back to thread

622 points ColinWright | 3 comments | | HN request time: 0.811s | source
Show context
kstrauser ◴[] No.30079330[source]
I sure hope that's right. It was the best feeling in the world to stand up an Apache server on my Amiga, and later my little FreeBSD server, and see my friends viewing the website I was hosting on my dialup connection. It wasn't pretty, it wasn't elegant, and it certainly wasn't fast, but it was mine. I made that. From installing the server to writing the HTML, I owned that service from end to end and had completely freedom to do whatever I wanted with it.

That's what I want the Internet to look like for my younger family and friends. It'll probably never happen exactly this way, but I can picture someone running an IPv6-only service on their phone to impress their friends. I know what their smile would look like because that was once my smile, too.

replies(14): >>30079383 #>>30079412 #>>30079441 #>>30079505 #>>30079550 #>>30079551 #>>30079596 #>>30079689 #>>30079823 #>>30080525 #>>30080756 #>>30080986 #>>30082530 #>>30085966 #
throwhauser ◴[] No.30079550[source]
How can a small website cope with GDPR compliance though? The rules that sprang up to constrain the social-media behemoths seem onerous for anyone but them to comply with.
replies(3): >>30079576 #>>30079601 #>>30080059 #
matheusmoreira ◴[] No.30079576[source]
All you have to do is not collect any data. Don't set any cookies.
replies(1): >>30080279 #
1. johannes1234321 ◴[] No.30080279[source]
Setting cookies is fine. If they are needed.

You need a session cookie for the login function the user uses? - Use a cookie. No banner needed.

The user puts something in their shopping basket? - Use a session cookie. No banner needed.

You want to store information, not required, in order to identify the user again even though they didn't login, maybe to share the identity with an ad network? - You need a cookie banner where the user can opt out easily.

replies(1): >>30080552 #
2. MereInterest ◴[] No.30080552[source]
Not only that, but storing information to identify the user again requires affirmative consent. GDPR doesn't just require that the user can opt out of tracking, but that any tracking occurs only after the user has freely given informed consent.
replies(1): >>30083817 #
3. johannes1234321 ◴[] No.30083817[source]
Yes. If your users create an account with name and address data they need to agree to that data storage.

If your shop just sells them a virtual thing there is no need to collect personal information.

If you ask for the address and more or less directly print it on the label and then delete again it is a bit of an edge case where no explicit confirmation might be needed, however having a good data policy is good practice anyways and then having the extra checkbox in the order flow is not a big deal.