← Back to context

Comment by glitchcrab

14 days ago

As much as the idea of GDPR (and specifically cookie consent) is well intentioned, the actual laws themselves aren't great. Cookie consent is especially frustrating because it encourages the creators of the consent popups to use dark patterns to try and trick people into just accepting them.

Cookie consent only apply to non-necessary cookies.

The laws are great because every cookie consent form is essentially saying, "we as a company want you to accept a cookie that is unnecessary."

If you don't install unnecessary cookies, you don't need to have a consent form.

  • Correct, but unfortunately that applies to the vast majority of websites. It wouldn't be so bad if the consent dialogs had an option to reject all optional cookies but unfortunately too many of them still try and trick or force you into accepting all cookies.

  • Hell, a lot of the 3rd party companies who are contracted to build the cookie consent forms are even following the spirit of the law (barely) by including a one click "reject all" button or link in the pop ups. They are often somewhat downplayed, like being in a smaller font or slightly hidden, because fuck you, but are you really so damn lazy that clicking "reject all" once every hour is such an objectionable activity that you'd rather just dump any and all consumer protections of data?

  • > Cookie consent only apply to non-necessary cookies.

    There’s a different issue here: lawyers and companies are often concerned that what they deem necessary will be deemed unnecessary when challenged. So, they require cookie consent preemptively to avoid liability in case they get it wrong.

    • There's no chance in hell those 2761 "partners" that ask for user data are ever necessary