search

RBoelter / twitterBlock

Twitter Block Plugin for OJS, OMP, OPS 3.x
http://leibniz-psychology.org
GNU General Public License v3.0
2 stars 6 forks source link

cookie warning #4

Closed p-heckler closed 4 years ago

p-heckler commented 4 years ago

Hi,

It might be useful to add a note on the setup page reminding the administrator that this plugin calls a twitter cookie so that they adjust their privacy policy accordingly.

RBoelter commented 4 years ago

Hi, it seems that Chrome with default security/privacy settings blocks Twitter cookies, because I have never seen a Twitter cookie. I changed the settings and now it has been set. Also in Firefox it is actually set with the default settings, which I did not check. In the last commit, 'data-dnt="true"' was added to the widget (https://developer.twitter.com/en/docs/twitter-for-websites/privacy), but the cookie is still set. I hope the plugin is DSGVO/GDPR konforn with 'data-dnt="true"'. I will add an extra information for the administrator in the next commit.

p-heckler commented 4 years ago

Hi, Thanks for the commit! I guess DNT does not prevent the cookie from loading, but rather the user's data from being used for ad purposes(I would need to get a closer look to what exactly the cookie contains with DNT activated). This at least makes the cookie compatible with the so-called "cookies directive", but GDPR still requires at the very least information, and quite possibly consent since it is not strictly necessary. Adding information for administrators will be useful, especially since OJS does not manage cookies natively. You could drop a link to the official PKP doc on the matter: https://docs.pkp.sfu.ca/gdpr/en/what-policies#3-cookie-policy so administrators know what do to!

RBoelter commented 4 years ago

Do you think this is good enough? I'm not so good in "lawful wording". 😄

twitter

RBoelter commented 4 years ago

Commit https://github.com/RBoelter/twitterBlock/commit/02d43efcb7d26b7501362634d5a51ac6adb6f63b includes the new warning.

p-heckler commented 4 years ago

That looks good to me! "Please adjust your cookie policy accordingly" would be an alternative phrasing, but both are clear. I have added a pull request for French locale while I'm at it!