Add Cookie Policy #63

New Issue

2026-10-04T22:58:54+02:00

adam commented

2026-10-04 22:58:54 +02:00

I think it will be a good ideea to add cookie policy disclaimer on webpage with ability to edit the disclaimer from a .text document

I think it will be a good ideea to add cookie policy disclaimer on webpage with ability to edit the disclaimer from a .text document

adam closed this issue

2026-10-04 22:58:54 +02:00

adam commented

2026-10-04 22:58:55 +02:00

How i see it

Context
• Site name: [Your Site Name]
• Domain: [your-domain.com]
• Contact email: [privacy@your-domain.com]
• Jurisdictions to cover: EU (GDPR + ePrivacy), UK GDPR, and California (CPRA).
• Consent UI: we show a banner with Accept all, Deny all, and Customize; users can toggle Analytics and Marketing (Necessary always on). If a user denies all, the app currently redirects to https://www.google.com.

How i see it Context • Site name: [Your Site Name] • Domain: [your-domain.com] • Contact email: [privacy@your-domain.com] • Jurisdictions to cover: EU (GDPR + ePrivacy), UK GDPR, and California (CPRA). • Consent UI: we show a banner with Accept all, Deny all, and Customize; users can toggle Analytics and Marketing (Necessary always on). If a user denies all, the app currently redirects to https://www.google.com.

adam commented

2026-10-04 22:58:56 +02:00

I know we are legally required to have this but I really hate the idea of having a cookie banner.

Let's think about a way to do it as minimalist as possible and as non-intrusive as possible.

If this is a concern, we can also just remove the cookie - we only use it for dark/light theme and we might be able to do without cookie at all.

I know we are legally required to have this but I really hate the idea of having a cookie banner. Let's think about a way to do it as minimalist as possible and as non-intrusive as possible. If this is a concern, we can also just remove the cookie - we only use it for dark/light theme and we might be able to do without cookie at all.

adam commented

2026-10-04 22:58:57 +02:00

If you are not collecting data from the user, why would you need cookie consent?

If you are not collecting data from the user, why would you need cookie consent?

adam commented

2026-10-04 22:58:57 +02:00

I looked into it and it seems we do not need a cookie policy as we do not track or collect user data.

However, we could add a note to the info screen explaining what the cookie does and how long it lasts.

Also, additionally, we could add a link to an external privacy policy or imprint somewhere.

I looked into it and it seems we do not need a cookie policy as we do not track or collect user data. However, we could add a note to the info screen explaining what the cookie does and how long it lasts. Also, additionally, we could add a link to an external privacy policy or imprint somewhere.

adam commented

2026-10-04 22:58:58 +02:00

Can you please make this on/off from an environment var? I wouldn't bother viewers on our instance with unnecessary red tape to be honest, so I'd prefer if I can easily turn it off 😕

Can you please make this on/off from an environment var? I wouldn't bother viewers on our instance with unnecessary red tape to be honest, so I'd prefer if I can easily turn it off 😕

adam commented

2026-10-04 22:58:59 +02:00

The cookie or the policy?

The cookie or the policy?

adam commented

2026-10-04 22:59:00 +02:00

I'm at this point inclided to remove the cookie alltogether and just default to the dark theme. I really don't like the bureaucracy involved.

I'm at this point inclided to remove the cookie alltogether and just default to the dark theme. I really don't like the bureaucracy involved.

adam commented

2026-10-04 22:59:00 +02:00

The cookie or the policy?

Well, both. Cookies don't really need a notification, since, as you found out, you are not collecting/tracking users. There's no legal obligation to notify users if you don't track/collect data.

Regarding the privacy policy, I'm not sure whose privacy you want to apply the document to? If it's node owners - you have their implicit consent to share data, because it's already emitted into the air i.e. they made it public already. If it's web visitor privacy - I don't really know how the web visitor's privacy is impacted if you don't collect their data at all.

> The cookie or the policy? Well, both. Cookies don't really need a notification, since, as you found out, you are not collecting/tracking users. There's no legal obligation to notify users if you don't track/collect data. Regarding the privacy policy, I'm not sure whose privacy you want to apply the document to? If it's node owners - you have their implicit consent to share data, because it's already emitted into the air i.e. they made it public already. If it's web visitor privacy - I don't really know how the web visitor's privacy is impacted if you don't collect their data at all.

adam commented

2026-10-04 22:59:01 +02:00

Agreed

Agreed

adam commented

2026-10-04 22:59:02 +02:00

This is not for node owners, if you use mesh witout encryption then you agree to share data.
But if you are a web visitor, IP address is data collection, i open this post because one of my local user ask me abouth this.

This is not for node owners, if you use mesh witout encryption then you agree to share data. But if you are a web visitor, IP address is data collection, i open this post because one of my local user ask me abouth this.

adam commented

2026-10-04 22:59:02 +02:00

You can tell them, we are not collecting IP addresses. In fact, we are not collecting anything from the internet, only from the radio mesh.

You can tell them, we are not collecting IP addresses. In fact, we are not collecting anything from the internet, only from the radio mesh.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: adam/potato-mesh#63