klaro-js icon indicating copy to clipboard operation
klaro-js copied to clipboard

Generate list of cookies for privacy statement

Open programmdesign opened this issue 6 years ago • 6 comments

As a user, I'd like to generate a list similar to this one from config file. Should be embedded into the privacy or cookie statement.

screenshot 2018-05-29 18 12 13

See here: https://www.hrs.de/web3/cookie_policy.do?activity=index

programmdesign avatar May 29 '18 16:05 programmdesign

Interesting, we already have an option for required apps, which you could use to list cookies. Would it make sense to define app entries for each of those (with lists of cookies) or would it be more appropriate to have a specific way to document them. As apps, you could add them like this:

{ name: 'retargeting', required: true, cookies: ['retargetingCookie'], }, { name: 'sessionManagement', required: true, cookies: ['JSESSIONID'], }, { name: 'rememberMe', required: true, cookies: ['rememberMeGlobalToken'], }, We can think about defining a specific section for all technically required cookies (though I would disagree that those listed in the example above are strictly required) that could be collapsed by default to not overwhelm the user, would that make sense?

adewes avatar May 29 '18 17:05 adewes

Well, to add maximum transparency, I think it'd make sense to be able to categorize and describe the cookie in the settings according to GDPR terminology (required, optional, must-have to make page work? -- not sure exactly). If I then had a configurable snippet that I can add to my Cookie Page that shows a table that I can style myself (like above), maybe even with a button like on #9. That would be cool.

In a perfect world, you generate the entire best practice cookie statement for the user.

The table could have the following columns:

  • Cookie
  • Why used
  • Expiry date
  • Status (on / off)
  • ...

(not sure if technical / function category make real sense, but maybe other fields)

If too many cookies, you probably want to allow the user configure if he wants to show the sections (see #8) that she can (un)collapse. Ensure better readability. In an even more perfect world, I can turn entire sections on/off ;-)

When i embed the script on the privacy or cookie page, i should be able to provide params like:

  • section: ['all'] or ['analytics', 'service', ... ] --> if not 'all', just render certain sections
  • category: ['required'] vs ['optional'] vs. ['all'] --> if not all, render just required or optional cookies
  • columns: ['cookie', 'reason', 'expiry'] --> columsn = parameter from config . show_cookie_status: true -> if true, show toggle button per cookie / per row; if false: don't show.
  • css_classes: ['...']

The values in the columns dict (except for status/status button) should ideally be field names from the config file that I can include here.

I guess, all it takes is a small script that loops over the config files and it's parameter to render a table or row/column divs ala bootsrap.

programmdesign avatar May 29 '18 22:05 programmdesign

Sounds like a very useful feature and easy to implement, I guess we could add a cookiePolicy section to each app entry (as the current cookies entry is just for matching their names) and generate that information from this.

adewes avatar May 30 '18 06:05 adewes

(just curious) is this one still on someones list / anyone started implementing this?

jobee avatar Nov 12 '19 08:11 jobee

As far as I know, this has not been worked on. If you (or anyone else) starts working on this, I want to encourage them to open a Pull Request, include "WIP" for "Work in Progress" in its title and reference this issue.

jaller94 avatar Nov 12 '19 09:11 jaller94

This feature would be very good to have in order to have the possibility to add a cookie declaration within the consent banner instead of an extra page on the website.

Here is an example of how it could be done from cookiehub.com. There is just added tab navigation within the consent banner:

  1. where you can set your preferences
  2. open the list of all cookies used on the page

cookiehub_cookie-list

mrmauriziorusso avatar Mar 05 '21 09:03 mrmauriziorusso