Cookies - Information notice

More
2 years 1 week ago #177137 by advanz_lu
Hello everybody,

these days websites are getting paranoid about cookies and the "do you accept cookies" messages are now everywhere.

LS *needs* cookies to manage the survey workflow.

I was wondering if there was an easier way (a new option in the 'data policy settings' ?) to inform the user that the cookies that are being sent are "essential" for LS to work properly - other than making a manual note on the introduction page to a survey?

Thanks,

-Graham-
The topic has been locked.
LimeSurvey Partners
More
2 years 1 week ago #177143 by jelo
Replied by jelo on topic Cookies - Information notice

advanz_lu wrote: I was wondering if there was an easier way (a new option in the 'data policy settings' ?) to inform the user that the cookies that are being sent are "essential" for LS to work properly

No, but you can add a feature request.

I'm not a fan of these "do you accept cookies" messages. These were the result of a cookie law long before GDPR. UK was quite pushy. In Germany no local law was enforced, so haven't found many websites using these additional cookie warnings.

Since GDPR is in force, the cookie warnings became bigger and often turned into a tool for acceptance of different cookies. Mostly caused by advertising tracking.

What I would like to see, is an internal warning box inside the data policy settings, where LimeSurvey is informing the survey designer about the impact of survey settings done.

The kind of cookie usage would be there too.
Depending on the settings that might change. E.g. "Set cookie to prevent repeated participation" will set a cookie, which is not expiring with the user session. But that setting currently seem to be buggy. So no cookie is set.

The sessioncookies are named depending on the serversettings (PHPsessionname). LimeSurvey dev could change the name, but currrently use the generic name.

PHPSESSID Path / Expires on Session
YII_CSRF_TOKEN Path / Expires on Session

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The following user(s) said Thank You: advanz_lu
The topic has been locked.
More
2 years 1 week ago #177145 by DenisChenu
If i don't make error : GDPR accept session cookies without information.

GPDR in LimeSurvey is more related to : «What do you do with the data»

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.
The topic has been locked.
More
2 years 1 week ago #177151 by jelo
Replied by jelo on topic Cookies - Information notice

DenisChenu wrote: GDPR accept session cookies without information.


The impact of GDPR on cookies when not using third-party tools for tracking and advertising is not strong.
Nothing really changed.

But in the data protection statement you can state the cookies the website sets. You often do that, to prevent people getting confused (or more), when looking at the cookies.

The upcoming EPrivacy regulation ( en.wikipedia.org/wiki/EPrivacy_Regulation_(European_Union) ) will change the way to handle cookies.
That regulation will stop the inform and consent madness on cookies for things like session and shopping-cart. So no consent is needed for non-privacy-intrusive cookies.

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The following user(s) said Thank You: DenisChenu
The topic has been locked.
More
2 years 1 week ago #177152 by DenisChenu
Arg … looking at this picture : en.wikipedia.org/wiki/EPrivacy_Regulatio...ENS_architecture.jpg

Seems administration want to track all action of citizen … I'm unsure if i prefer to be tracked by company or by governement … ;)

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.
The topic has been locked.
More
2 years 1 week ago #177154 by jelo
Replied by jelo on topic Cookies - Information notice

DenisChenu wrote: Seems administration want to track all action of citizen

I don't see a direct connection between the ePrivacy regulation and your statement. That depends on the country.

So, you might be interested in:

Systematic Government Access to Private-Sector Data in France

www.oxfordscholarship.com/view/10.1093/o...0190685515-chapter-2

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The following user(s) said Thank You: DenisChenu
The topic has been locked.
More
2 years 1 week ago #177158 by DenisChenu

jelo wrote:

DenisChenu wrote: Seems administration want to track all action of citizen

I don't see a direct connection between the ePrivacy regulation and your statement. That depends on the country.

Yes, but eRegulation give Eu rights on this :

See eBusiness Life cycle (use case) for citizen : documents goes to Public administration + Justice + Health and come back ?

If i buy a book on any e-coomerce, why it can need a call to gov ?

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.
The topic has been locked.
More
2 years 1 week ago #177159 by advanz_lu
Before this discussion get's too theoretical - when you go to www.oxfordscholarship.com/view/10.1093/o...0190685515-chapter-2
you see the cookie message at the top of the screen.

My original question was whether it would be a good idea to have an option that "simply" puts a banner like this to tell people - "In order to take this survey, you are agreeing to our use of cookies."
Then this banner can disappear on the next question screen.

Thanks for the various links and information - very useful and interesting !

-Graham-
The topic has been locked.
More
2 years 1 week ago - 2 years 1 week ago #177160 by jelo
Replied by jelo on topic Cookies - Information notice

advanz_lu wrote: My original question was whether it would be a good idea to have an option that "simply" puts a banner like this to tell people - "In order to take this survey, you are agreeing to our use of cookies."

I don't see that feature coming. I won't support it and won't use it.
Millions of people are clicking these signs everyday without reading, without consent. It makes sense when you have a lot of thirdparty cookies or firstparty tracking cookies, but for LimeSurvey usage you can just put a sentence in the data policy text.

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
Last edit: 2 years 1 week ago by jelo.
The following user(s) said Thank You: DenisChenu, advanz_lu
The topic has been locked.
More
2 years 1 week ago #177162 by advanz_lu
Good point
Will do

Thanks!
The topic has been locked.
More
2 years 1 week ago #177163 by jelo
Replied by jelo on topic Cookies - Information notice

DenisChenu wrote: Yes, but eRegulation give Eu rights on this :
See eBusiness Life cycle (use case) for citizen : documents goes to Public administration + Justice + Health and come back ?

I'm quite surprised that you focus on the graphic. I cannot follow your conclusions.

The picture is not about ePrivacy. It's about a European IT governance structure (which is touching many topics, so you can draw a connection to ePrivacy as well).

en.wikipedia.org/wiki/EIDAS
www.esens.eu/content/e-sens-project-completed

The new ePrivacy regulation will be replacing this regulation
en.wikipedia.org/wiki/Privacy_and_Electr...tions_Directive_2002

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The topic has been locked.
More
2 years 1 week ago #177164 by jelo
Replied by jelo on topic Cookies - Information notice

advanz_lu wrote: Good point
Will do

If you want to mention exact cookie names, you will need to check that in your browser.
LimeSurvey isn't overriding the default cookie name of PHP.

Something like this.

The following cookies are necessary for the survey to operate.
Session cookies are used to keep track of a respondents progress in a survey.
PHPSESSID Path / Expires on Session
YII_CSRF_TOKEN Path / Expires on Session


That kind of stuff could be provided by LimeSurvey as well. It's a feature request.

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The topic has been locked.
More
2 years 1 week ago #177168 by DenisChenu
The only times we REALLY need a cookie agreement : usage of (awfull) Google tracking system.

And maybe : we must disable it if Do not track is enabled on browser (a bug to be reported ?)

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.
The topic has been locked.
More
2 years 1 week ago #177170 by jelo
Replied by jelo on topic Cookies - Information notice

DenisChenu wrote: The only times we REALLY need a cookie agreement : usage of (awfull) Google tracking system.


The impact that more websites provide more infos about each cookie set, is a nice side effect of GDPR.

To inform user about what cookies are having which purpose is a good thing.

When using functions like preventing access for a year, you will have a date on the cookie.
So someone might be able to track back usage of a browser with LimeSurvey at a certain time.
LimeSurvey isn't tracking, but it's placing a cookie for a year inside the browser.
So you want to inform the user and the respondents to keep trust level as high as possible.

Currently I have no overview of all cookies possibly set. Timer questions use additional cookies?

Keep a wiki page with all cookies set at any point of LimeSuvey usage, might be useful for many things.

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The topic has been locked.
More
2 years 1 week ago #177188 by DenisChenu

jelo wrote: So someone might be able to track back usage of a browser with LimeSurvey at a certain time.

Only with broken browser then : cookies can not be read by another website without browser consent.

jelo wrote: Currently I have no overview of all cookies possibly set. Timer questions use additional cookies?

Keep a wiki page with all cookies set at any point of LimeSuvey usage, might be useful for many things.

Yes, good point.

1. I never use cookies system in LimeSurvey because when i really need one response : i use token (cookie : lol … )
2. You're right : timing question use cookies

I think too it's the only 2 cookies excpet google tracking.

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.
The topic has been locked.

Start now!

Just create your account and start using Limesurvey today.

Register now