Adding blockers to 3rd party services, for cookies #27
Conversation
…pt cookies first. Kinda ugly but is probably the legally safe thing to do. Also reformatted some of the legal policy to flow a little better. Minor css changes to support the changes.
DarthFutuza
added
help wanted
…r so they can choose to view it on YouTube directly instead of agreeing to get a cookie
|
I'm considering just adding cookies (and a popup to agree to this), maybe its silly to just avoid this. Might produce a separate PR demonstrating what that would be like. However if I do that, might as well go all the way and start caching more things like the images. |
|
I think that for now, we will not use cookies/cache as we have too little control over that stuff while using Github as our host. When the site gets upgraded to require server side code (for the launcher and other features such as the databank and logins), we'll add cookies at that point and change our policies to match. On the plus side the Discord widgetbot is pretty slow so this will also make the home page load more quickly since that can be deferred until the user gives permission. |
It is the sadness.
This changes elements such as the WidgetBot Discord Newsfeed on the home page to have display none, and only display after the user has agreed to accepting 3rd party cookies. This similarly happens with embedded YouTube videos.
I don't really want to do this if there's a better way, but I can't think of one that doesn't require actually using/storing cookies. It seems sort of legally grey as to whether or not opt-in/notification is required for essential cookies? Think it depends on the country? I'm also unclear about whether or not it is possible to use YouTube embedded videos without also permitting Google free reign. Maybe these are still considered 'essential'? Need some advice.