User consent popup. - Githubissues

IoIxD commented 2 years ago

This PR addresses #42

There is now a popup, by default, on each post page: "Due to GDPR we require your consent to serve content from third party sites such as cdn.discordapp.com.".
Nothing from cdn.discordapp.com or Google Fonts is loaded by default until you click "Consent" on that popup.
Clicking "Consent" sets a cookie (this is communicated to the user) that saves this setting.
Clicking "Don't Consent" closes the popup. We don't set a cookie that time because the people who care enough not to have .png files loaded from a site they don't trust probably don't want a cookie set.
The Google Fonts depedency is removed (#41 accidentally got mixed into this). The Ubuntu font is now served locally.

IoIxD commented 2 years ago

Found a better source that I should link other then some random news article: [https://gdpr-info.eu/art-6-gdpr/](Article 6, GDPR).

Processing shall be lawful only if and to the extent that at least one of the following applies:

the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

IoIxD commented 2 years ago

On second review, both our site and Discord use CloudFlare. So this article does not apply here, because the IP is entirely handled by CloudFlare.

IoIxD / dforum

User consent popup. #43