Need to be able to toggle on "cookie policy" agreement notification

[jamalex]

For online hosted instances of Kolibri, for some jurisdictions, we need to be able to toggle on a simple cookie notice agreement.

Fortunately, we can keep it fairly simple, as we don't include 3rd party cookies (such as Google Analytics) within Kolibri, and all the cookies we do use are for "strictly necessary" purposes. So we don't need a bunch of checkbox options, etc.

[rtibbles]

all the cookies we do use are for "strictly necessary" purposes.

I don't think this is true - our visitor_id cookie is a tracking cookie.

[jamalex]

Ah yes, still not 3rd party, but as the site would function (from the end-user's perspective) without that cookie, it's not necessary indeed! So I guess we at least need one checkbox for disabling that one as desired.

[rtibbles]

Right, and it needs to be persistently available in some form, as people need to be able to revoke their consent in the future as well. Do you have a sense of how obtrusive the persistent availability has to be?

[jamalex]

I believe CookieBot recommended putting the opt-out within the cookie notice/policy page. That's what we do here, for instance: https://learningequality.org/cookies/ (linked from the footer)

[jtamiace]

Here are the existing designs for this. This hasn't been reviewed yet, so I'm looking for feedback. I'm not sure what behaviors should happen when someone clicks "privacy policy" and whether we have copy for that.

Also see this related thread about tracking who and how many people are giving their consent https://learningequality.slack.com/archives/CN9S5A5EG/p1643749265330059?thread_ts=1643205211.013900&cid=CN9S5A5EG