as-ideas / oil

191 stars 56 forks source link

Faulty Consent String after CPC "DEACTIVATE ALL" #265

Closed Waschnick closed 5 years ago

Waschnick commented 5 years ago

For example

ltparis2018 commented 5 years ago

We analyzed the problem. We could not reproduce the problem. Therefore, we guess there is a misunderstanding in respect of the expected behavior. On load there is no consent. Therefore, the consent string (for example reported by the __cmp() function) does not include any vendor ID and any purpose. If the user clicks ACCEPT this is an opt-in. It gives consent to all vendors and all purposes. Therefore, all of them are contained in the consent string. If the user clicks “More information” and then uses the “Deactivate All” button this does not change anything until the user clicks the ACCEPT button. After that, the consent string does not contain any of the purposes anymore. But, all vendors are contained. Currently, OIL does not support opt-outs for vendors. This is still a planned feature – see GitHub issue https://github.com/as-ideas/oil/issues/205.