player.js icon indicating copy to clipboard operation
player.js copied to clipboard

cross-site tracking cookies enabled despite `dnt=1`

Open tvercaut opened this issue 2 years ago • 1 comments

I haven't found a fix for the issue described below but I believe this is a bug with dnt=1.

Discussed in https://github.com/vimeo/player.js/discussions/889

Originally posted by tvercaut January 24, 2023 Hi,

I am trying to embed a vimeo histed video in a webpage without needing an opt-in cookie policy. I understood that the "do not track", dnt=1 parameter was designed for that purpose: https://complianz.io/embedding-vimeo-videos-privacy-friendly/

However, firefox reports that the vimeo player makes use of cross-site tracking cookies despite the DoNotTrack request. As one can see on https://complianz.io/embedding-vimeo-videos-privacy-friendly/ when the browser is configured to block cross-site tracking, the console reports the following:

Request to access cookie or storage on “https://player.vimeo.com/video/643915247?title=0&byline=0&portrait=0&badge=0&quality=1080p&dnt=1” was blocked because it came from a tracker and content blocking is enabled.

Am I misunderstanding the dnt=1` parameter or is there something else that needs to be done to prevent vimeo from requesting such cross-site tracking cookies.

Many thanks, Tom

tvercaut avatar May 04 '23 13:05 tvercaut

I have also been having issues with dnt not working. I can clearly see it in my URL, as ?dnt=1 but Vimeo cookies are still appearing on my site. More info on this would be great.

georgebid avatar Jul 20 '23 10:07 georgebid

Closing this issue in favor of the existing discussion because this is not an API or API library issue.

bdougherty avatar Apr 03 '24 23:04 bdougherty