Automattic / wp-calypso

The JavaScript and API powered WordPress.com
https://developer.wordpress.com
GNU General Public License v2.0
12.42k stars 1.99k forks source link

Cookie banner: FSE friendly way to enable and modify the banner #52100

Closed simison closed 1 year ago

simison commented 3 years ago

Paid sites get a feature called "cookie banner". The code is Jetpack plugin and you enable & modify it via Customizer's widgets (docs).

Screenshot 2021-04-20 at 13 33 47

Widget is a bit odd place to control a site-wide banner like this because you place it at specific widget area but the banner appears on top of the site. Customizer is great though because it offers a live preview.

FSE sites don't have Customizer nor widgets, and don't get the feature.

Ideas

Some could be implemented across both Classic and FSE themes.

Related feature request https://github.com/Automattic/wp-calypso/issues/64768

arcangelini commented 2 years ago

I think it may be best to get someone from ads or legal to weigh in on the need for this widget. I believe the features of this widget are extremely basic and do not meet the needs of GDPR any longer. The cookies that it sets when you "accept" the banner were only for advertising purposes — and we no longer read them because we have an updated GDPR banner that actually does give users some choice into the use of their data. We currently only show this specific banner for US-based visitors or sites that add the widget manually and aren't part of WordAds. In those cases, it's more of a cookie notice and doesn't actually have any useful functionality.

WordAds now has a specially designed cookie banner (pMyNb-4TC-p2) that is displayed apart from this widget. I believe @catscheer (also tagging @jennyzhu in her absence) just made a recent update as well regarding the state of the banners (p2y3YZ-4RJ-p2). With all this in mind, it may be time to deprecate/let this go.

Tagging @ivan-ottinger who is working on the widgets currently.

ivan-ottinger commented 2 years ago

If we decide to deprecate the Cookie & Consents Banner widget, we will be glad to help with that in @Automattic/apex. 👍🏼

simison commented 2 years ago

Convo p4H3ND-18w-p2 leaning towards keeping this de-facto deprecated going forward, even if it works on widget areas.

ivan-ottinger commented 2 years ago

Convo p4H3ND-18w-p2 leaning towards keeping this de-facto deprecated going forward, even if it works on widget areas.

Just to double-check I understand correctly - the decision hasn't been fully made yet, right? Thanks.

simison commented 2 years ago

Still open about it but it definitely lowered the priority significantly in my mind.

Sounds like it would need entirely be redesigned to actually be useful, and in it current form it isn't helpful, other than on the surface. I'm all ears for more input on this tho! Especially if customers are asking for something like this, and what are they specifically asking/needing.

filipanoscampos commented 2 years ago

Here is a case of a user who needs to add a Cookie banner and is using a theme without a Widget area: 4777334-zd-woothemes

I am sharing this here since the previous issues were closed in favor of this one. It would be great to have an alternative to offer our users, and not leave them without a solution.

philnick206 commented 2 years ago

Adding this issue as another example of a customer wanting this: #4800058-zen

The use-case here is to have compliance with Google Analytics which is integrated on a simple site. I assume that the current widget wouldn't be compliant enough for GA, thus this seems like a legit scenario that is missing coverage, but I'm out of my depth.

rw-ye commented 2 years ago

Another case here where the user is asking about adding a cookie banner here: 4817167-zd-woothemes

They are using FSE

MaxPhilip commented 2 years ago

Another user wanting to add a cookie banner using FSE with not widget area: 4811882-zen

daria2303 commented 2 years ago

4821868-zd-woothemes

upwardmomentum84 commented 2 years ago

Another user wanting to add a cookie banner using FSE - 4828543-zd-woothemes

JessBoctor commented 2 years ago

I had another user wanting to use this widget in 32880209-hc. They ran into the problem of the Russell theme not having a widget area.

Seeing this discussion, I asked the user for feedback of why they wanted to use this widget. Their reply was, "I need to inform visitors that the site uses cookies, as I am adding Google Analytics code"

dolgelukkig commented 2 years ago

Another one here: 34442779-hc, the theme they are using is Attar

zdenys commented 2 years ago

4851074-zd-woothemes

csabarakasz commented 2 years ago

4829352-zd-woothemes

User is on Premium plan, using Payton theme and would need the Cookies banner. Suggested switching themes and added their case here!

philnick206 commented 2 years ago

It feels like we should no longer be recommending ANY sites use the Jetpack Cookies and Consent Widget (since it is no longer compliant with GDPR and related services and is no longer used by WordAds).

If that is the case, then there is a gap for any simple sites that are not in WordAds regardless of FSE or not. The only question I guess would be whether the current WP.com CMP that is automatically enabled on WordAds sites also fulfills the requirements for any services like Google Analytics (or similar, like Cloudflare Analytics, are there others)?

And there is a gap on WoA but we can recommend they use a consent management plugin (I'm not sure if we have a shortlist of recommended options or not).

Did I get all that right @ivan-ottinger @simison @arcangelini ?

ivan-ottinger commented 2 years ago

Hey @philnick206 👋🏼

Did I get all that right?

While I don't feel to be the person qualified to answer your question, it sounds right to me.

There were a couple of comments on the P2 post that share a bit more details: p4H3ND-18w-p2#comment-2540 (if you haven't read them already).

gabriel-fuentes commented 2 years ago

4867639 zd

CGA8C commented 2 years ago

34788451 HC

User asked for a Cookie Consent Widget

upwardmomentum84 commented 2 years ago

6510482 HC

User asked for a Cookie Consent Widget

donalirl commented 2 years ago

52100-hc concerned about not being able to add a cookie banner. I promised we'd let them know when a new solution is ready.

csabarakasz commented 2 years ago

4914228-zd-woothemes

filipanoscampos commented 2 years ago

Not an FSE friendly cookie widget, but a request for a Cookie banner that compiles with Italian law: 4882757-zd-woothemes

kspilarski commented 2 years ago

4915537-zd

FSE theme: Twenty Twenty Two.

csabarakasz commented 2 years ago

4917434-zd-woothemes

Premium plan, no way to add cookies banner.

jamiepalatnik commented 2 years ago

Another report: 31226778-hc

Site is using Arbutus theme. The user mentioned "I think I am obliged to do it because of GDPR"

No alternative to offer other than switching to another theme.

ezebecke commented 2 years ago

Another report: 4929715-zd

Premium plan with "Byrne" theme.

yashitamittal11 commented 2 years ago

Another report - #4935143-zen Premium plan with FSE theme Russell

syhussaini commented 2 years ago

Here is another case where the user asks for Cookies and a Consent Banner #4940939-zen.

I guess we can build something into all the FSE based themes that should allow the users to activate/deactivate the cookies and consent banner with a toggle button in theme settings.

I am just thinking out loud

formosattic commented 2 years ago

The resolution seems to require more discussion involving different parties, see internal thread: pc4f5j-1F8-p2 I've also flagged this for the DotCom janitors at pc4f5j-1F8-p2#comment-2293

masperber commented 2 years ago

I want to flag that our support document on the Cookies and Consent Widget says the following:

Themes that support the Site Editor do not use widgets, so you won’t see Appearance → Widgets in your dashboard. Instead, you can edit all of your site in one place at Appearance → Editor. Click here to learn how to use the Site Editor.

This seems to imply that there is a way to add the Cookies and Consent Widget in the Site Editor, but that doesn't seem to be possible currently.

csabarakasz commented 2 years ago

4958120-zd-woothemes Site with free plan and Remote FSE theme.

paulostp commented 2 years ago

4960117-zd

Personal plan with Quadrat White

i11za commented 2 years ago

Another report here: 35219220-hc

Site with eCommerce plan / Twenty Twenty Two theme. Recommended to use a plugin instead.

jamiepalatnik commented 2 years ago

Another report: 31226778-hc

Site is using Russell theme.

No alternative to offer other than switching to another theme.

adelineyaw commented 2 years ago

Another report: 5031409-zen Site is using Blank Canvas (Personal plan)

devNigel commented 2 years ago

Another case: 5308833-zd-woothemes

The site is using FSE theme Dora on the Starter plan. Informed they have to upgrade to Pro plan and use a plugin.

sarahcada commented 2 years ago

Another case at 34702400-hc Site has no paid plan at the moment, was using Dorna theme. They may change themes.

catscheer commented 2 years ago

@simison and @ivan-ottinger weighing in on this from a legal perspective. If you haven't read the answer from Holly to whether or not we still need the C&C banner, you can find it here https://wp.me/p4H3ND-18w. The TL;DR was that yes, we still need to provide some kind of cookie banner option for users to enable on sites that aren't showing our ads. The point of the banner is not to control any cookies, but rather to provide the opportunity for site owner's to provide a kind of cookie notice to their site visitors informing them of the fact that there are cookies in use on the site that can't be turned off. As is clear from this thread, lots and lots of users are demanding this functionality.

arunsathiya commented 2 years ago
github-actions[bot] commented 2 years ago

Support References

This comment is automatically generated. Please do not edit it.