CDLUC3 / ezid

CDLUC3 ezid
MIT License
11 stars 4 forks source link

Document Cookies that are tracked #529

Closed marisastrong closed 9 months ago

marisastrong commented 9 months ago

For our updated privacy policy, we will be providing information about cookies each service/application is tracking.

This spreadsheet is being used to track which cookies are used for each service. Please update the spreadsheet for EZID.

Note different cookies are tracked when a user logs in so we need to be inclusive of all cookies that are tracked.

https://docs.google.com/spreadsheets/d/1puytJGa2-yqkS0zM2fBgs6BOV0vdS03M3TkR5wXlgKE/edit#gid=0

sfisher commented 9 months ago

@marisastrong

EZID is using 5 cookies:

Examples:

_pk_id.21.3bac Appears to be an ID for the Matomo web tracking _pkses21.3bac Appears to be a session id for Matomo web tracking _ga and _ga_64DCG24MHF are related to Google Analytics which I believe is still in the EZID codebase and may not currently have tracking enabled and probably could be removed. sessionid is a cookie that only appears after an account has logged into the EZID application. Its main function is to keep track of the account as they navigate throughout the site so that EZID can show correct information and apply appropriate permissions for the logged in account. (Otherwise because of the statelessness of HTML they would have to supply credentials on every page.)

I can look into removing the Google analytics from the code but my development environment isn't fully working yet.

I can't directly enter this into the spreadsheet you asked me to fill in since it's read-only for my Google account.