Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Let me display a "Cookie opt-out" panel in their websites tracked by Piwik #8342

Closed
mattab opened this issue Jul 13, 2015 · 10 comments
Closed
Labels
c: Privacy For issues that impact or improve the privacy. Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc. Major Indicates the severity or impact or benefit of an issue is much higher than normal but not critical. wontfix If you can reproduce this issue, please reopen the issue or create a new one describing it.

Comments

@mattab
Copy link
Member

mattab commented Jul 13, 2015

In our effort to innovate and bring better Privacy to Piwik users worldwide, we would like to provide an easy to use mechanism for Piwik users to show a "Cookie opt-out" panel on their websites.

By default, when visitors view a website tracked by Piwik, tracking cookies are set on the visitor browser. It is possible for a Piwik admin to specifically disable all tracking cookies, but this would apply to all visitors. The goal of this feature is to let each visitor decide whether they want to opt-out from tracking cookies.

Suggested product changes

  • in Administration > JavaScript tracking code, a Piwik admin could check a box "Display a panel to let visitors opt-out from Tracking Cookies"
  • when the box is checked, the JavaScript tracking code would add a new call eg. _paq.push('enableCookieOptOut', 'This site uses cookies. Some of the cookies we use are essential for parts of the site to operate, and some cookies are used to measure how you use this website.', 'I accept cookies from this site', 'Continue');
    • parameters are: the main panel text, the checkbox label, and button label
    • the text would be translatable by Piwik translators (nice!)
    • if user wants to customise the text they can (when copy pasting)
  • when this function enableCookieOptOut is called, piwik.js would then display a Cookie opt-out panel in the website.
    • By default, I accept cookies from this site is checked (by default, Piwik uses cookie) [x]
    • A visitor can uncheck the box and click Continue and then Piwik.js will disableCookies
    • the panel could have slightly transparent background (it looks nice)

Example

integration platform as a service

(seen on http://elastic.io)

What are your thoughts?

@mattab mattab added c: Privacy For issues that impact or improve the privacy. Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc. labels Jul 13, 2015
@mattab mattab added this to the Short term milestone Jul 15, 2015
@mattab mattab added the Major Indicates the severity or impact or benefit of an issue is much higher than normal but not critical. label Jul 15, 2015
@braekling
Copy link

It is a great idea to integrate this into Piwik itself. So the users don't have to care about such things.
The feature was requested for WP-Piwik several times already, so there is a demand to cover.

One additional suggestion: The generated panel should use a meaningful & unique css-class, so users can modify the look on their own.

@mattab mattab modified the milestones: 2.15.1, Short term Oct 1, 2015
@mattab
Copy link
Member Author

mattab commented Oct 1, 2015

Moving to 2.15.1 after talking with @alex-gulentz - would be awesome to build this little feature in Piwik!

Btw: we will be able to offer an easy way to enable by default this feature across all website by adding the function call via CustomTrackerJs plugin.

@mattab
Copy link
Member Author

mattab commented Oct 8, 2015

In the issue above, we specc'ed a version of the cookie consent where the user would be able to directly opt-out of cookies from within the cookie consent panel. But actually, we may not need to go this way, it is a bit more complicated so let's start maybe with the easiest solution.

Simple spec/MVP

The easiest solution would be to simply inform the user that cookies are used to provide essential functionnality to the website.

  • The message would contain a link placeholder so the user can replace the placeholder by the URL to their "privacy policy" page or their "opt-out" page. The result is that visitors to the website are informed that cookies are used and possibly (if Piwik admin specified it) they have an opportunity to click on the link to learn more, and opt-out.
  • The button would say Accept or OK.
  • There would be no checkbox I accept cookies.

Questions

  • how do we let user change background, text-color and style button, text + background?
  • how do we let user easily the position the panel? (ie. top, bottom, maybe even in a custom dom node?)

@mattab
Copy link
Member Author

mattab commented Oct 8, 2015

Examples of cookie consent panels on existing websites below

Panel within the page

cookie4

Bottom

cooki3

cookie2

cookie1

cookie5

@Cruiser13
Copy link

I like the way the CMS Pimcore did implement this - with a lot of freedom for the admin in case of wording, styling and so on.

I'd also throw in that a checkbox with the ability to tell that cookies are not accepted is useless for many sites - most sites are dependent on cookies and we'd need a callback from Piwik to tell the site itself not to use cookies (e.g. implementations for Pimcore, MyBB and so on).
For 99% of sites administrated by myself I simply can't drop cookie support. No point in giving the user this option - he eighter accepts cookies or has to leave the site.

@tsteur
Copy link
Member

tsteur commented Nov 16, 2015

Can we maybe ideally not add such new features into LTS version (it'll be a patch release)?

@mattab
Copy link
Member Author

mattab commented Nov 18, 2015

@tsteur ideally yes, but it would mean we need to wait 6 months or so before having this feature in a stable Piwik 3.0 release, which is an issue as it is an important feature for German users and market... The upside is that this feature is "safe" regarding LTS since we add a new feature in piwik.js (that is not enabled/ used by default) and this should not change any core API or affect existing code

@tsteur
Copy link
Member

tsteur commented Nov 18, 2015

OK, feature doesn't really look high value to me as it's often displayed very differently for each site to have it integrated nicely. Will all the translations etc be in piwik.js? Also I'm wondering when offering something like this, whether we need to check several laws in various countries etc (which would be impossible)? I think at least in Germany it's not a law yet, but might be soon. Not sure what it then needs to contain etc. When offering something like this to all users we should maybe mention we are not liable if anyone gets fined or a disciplinary warning for not having it done the proper way and that they need to check local law.

Also wondering if ad blockers are a problem? piwik.js is often blocked by ad blockers so it would maybe not be displayed?

@mattab
Copy link
Member Author

mattab commented Nov 18, 2015

Will all the translations etc be in piwik.js?

No, all translations will be set in the Website tracking code, and translations will be stored in the server side. The Javascript Tracking code screen, will have a checkbox to enable the Cookie opt-out panel. User will copy the translations when copying the Js code into their page.

Also I'm wondering when offering something like this, whether we need to check several laws in various countries etc (which would be impossible)

No we don't need to: laws are different in each country, as each EU country for example receives the EU directive and can choose to implement it the way they want in local legislation. Just in europe there is wide diversity of implementations of privacy laws. Our goal at PIwik though is to lead the way in terms of privacy. That's why it's important for us to provide this feature and make it super easy for webmasters to inform their users.

Not sure what it then needs to contain etc.

It's mostly about us deciding what such panel should contain :-) I think it's important to find a message that is very easy to understand and very clear, as it will be ready by all kinds of people including some non technical at all. The text should really be the easiest to understand as possible 👍

When offering something like this to all users we should maybe mention we are not liable if anyone gets fined or a disciplinary warning for not having it done the proper way and that they need to check local law.

it's already clear that we are not liable, but I agree we should add a notice somewhere. it may be enough to mention this in a FAQ or User guide VS in product itself?

Also wondering if ad blockers are a problem? piwik.js is often blocked by ad blockers so it would maybe not be displayed?

It is fine and acceptable that this feature does not work, when ad blocker is enabled.

@mattab mattab modified the milestones: Short term, 2.15.1 Dec 4, 2015
@mattab
Copy link
Member Author

mattab commented May 24, 2018

We wouldn't work on this ticket as is, so closing for now. See #12600 for links to other issues

@mattab mattab closed this as completed May 24, 2018
@mattab mattab added the wontfix If you can reproduce this issue, please reopen the issue or create a new one describing it. label May 24, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c: Privacy For issues that impact or improve the privacy. Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc. Major Indicates the severity or impact or benefit of an issue is much higher than normal but not critical. wontfix If you can reproduce this issue, please reopen the issue or create a new one describing it.
Projects
None yet
Development

No branches or pull requests

4 participants