linuxfoundation / lfevents

For the Linux Foundation Events website events.linuxfoundation.org
MIT License
20 stars 4 forks source link

Add GDPR ribbon and opt-out information #519

Closed cjyabraham closed 4 years ago

cjyabraham commented 4 years ago

Copy what they have on lf.org for the ribbon and opt-out info.

Options for implementation:

  1. GDPR Cookie Consent Plugin: allows for cookie opt-in settings and blocking scripts as requested, Location based exclusion of cookie notice, etc. Seems very heavy and could slow site.
  2. Copy what's done on https://www.linuxfoundation.org/: use must configure cookie settings via browser. Fast but has fewer features.
  3. There are some other plugins which also seem feature rich but heavy. Here's a list of plugins that are picked because they are light.
thetwopct commented 4 years ago

I mostly recommend a 3rd party system - https://www.cookiebot.com. They auto-scan cookies regularly and update the acceptance, geo-target, respect DNT, meet accessibility standards, offer bulk consent for multiple domains (that's probably useful), multilingual...

They don't have dedicated non-profit information on their site, but they say to get in touch https://support.cookiebot.com/hc/en-us/community/posts/360014831313-Non-Profit-Organizations

I've also used this library a few times and style it to the suit the client:

https://github.com/ipatate/gdpr-cookies Demo: https://gdpr-cookies.now.sh

This script blocks 3rd party services from loading until consent is given or user interacts with site (which is deemed as acceptance), and can conditionally load scripts from an options modal. Slick.

But it may not be best suited to our needs as all LFE tracking is done via GTM, so the options to separate out what tracking is accepted by the user is greatly reduced (as the tracking scripts need to be inserted via JS).

Using GTM for tracking creates a problem for most other cookie plugins too, so with any plugin I would expect some manual work will always be required to set and maintain a more complex system. This is why an automated solution like cookiebot works well.

cjyabraham commented 4 years ago

Another option

cjyabraham commented 4 years ago

As per our discussion, the team wants to keep this as simple as possible and essentially to reproduce the behavior of what we have on https://www.linuxfoundation.org/ and https://training.linuxfoundation.org/.

cjyabraham commented 4 years ago

@thetwopct , can you adapt this option for use by both the new cncf and current events sites? The events site will need to display a Chinese translation of the text (use is_lfeventsci() to determine if you're on the Chinese site). I will get the Chinese text. All banners can point to the LF cookies page which I will work with Craig to get updated.

cjyabraham commented 4 years ago

Chinese text:

cjyabraham commented 4 years ago

An update from Kristin and LF legal:

We have updated the LF privacy policy and cookie policy and are ready to deploy the call out ribbon on the bottom of the following websites: OSS NA, OSS EU, ELC NA, ELC EU, ONES NA, ONES EU. This can be identical to the one currently on www.linuxfoundation.org - look, links, copy, etc.

cjyabraham commented 4 years ago

I think the link should open in a new tab since it takes the user off the events site.

cjyabraham commented 4 years ago

deployed