Cookie policy banner

[carlinmack]

Implement a cookie consent banner on zenodo.org and all subdomains (about.zenodo.org, ...)

• [x] On every page (i.e. implement in base template somehow) there must be a small banner in the bottom (something like the banner screenshot below). Saying: (i) This website uses cookies. Find out more on how we use cookies. Accept all cookies | Accept only essential cookies | X
  • [x] The word cookies should be linked to a configurable URL (e.g. https://about.zenodo.org/cookie-policy)
  • [ ] Allow instances to override the banner (by overriding the template), and to configure if they want it or not.
  • [ ] A global template context processor should inject if the cookie consent cookie is set to true/false.

• JS for cookie banner:

  • [x] On pressing Accept all, JS should be used to set a cookie (cookie_consent). The consent cookie must work across all Zenodo subdomains.
  • [x] The JS code in addition must unset _pk_... cookies on every request in case the cookie consent is not set or if it is set to false (this way we can allow users to withdraw consent from analytics cookies and it will work across all Zenodo subdomains).

• JS for Matomo

  • [x] The Matomo tracking code should do the following (see https://developer.matomo.org/guides/tracking-consent):

// User require user to accept Matomo cookies before setting them 
_paq.push(['requireCookieConsent']);
{% if cookie_consent %}
// User accepted Matomo cookies
_paq.push(['setCookieConsentGiven']);
{% endif %}

• [x] Add cookie policy menu item in bottom right of footer (https://github.com/zenodo/zenodo-docs-user/commit/96beb4d8a8f11ae5bad1626db5de776adbd26125)

• [x] Ensure it looks good on all screen sizes

• [x] All static sites must implement same cookie banner. https://github.com/zenodo/zenodo-docs-user/pull/115

• [x] Cookie policy page must have the following buttons:

  • "Withdraw consent" if cookie consent is set to true
  • "Accept all cookies" if cookie consent is set to false or not set
  • "Accept only essential cookies" if cookie consent is not set

[carlinmack]

A global template context processor should inject if the cookie consent cookie is set to true/false.

I don't believe this is necessary as Matomo handles whether cookies are set or not itself