Recommended plugin for cookie managment?
m
I live in the US but am looking to run google adsense ads on my site and my understanding is they require me to be GDPR and CCPA compliant which means I need some way to let users op-in to the google cookies. I don't know much about these things so I was wondering what is a good, free, plugin for Umbraco 13 people are using to handle cookie compliance? Idealy it would work with UmbForms too as I will need to make a contact page some day.
d
We use Civic which can be added via Google Tag Manager.
m
Not familiar with Google Tag Manger. Is that another GDPR/CCPA thing? I don't see a package for it. Was it gard to integrate?
d
Our go-to is Cookiebot: https://www.cookiebot.com/ They advertise themselves for their compliance with GDPR and CCPA. It's simply a script that you place in your html and it just works.
although cookiebot is not free 😐
m
I had looked at them but seeing as i live paycheck to paycheck as a janitor paying 55$ a month is not freezable right now.
s
And remember, if you don't host your site in the EU, you don't have to do anything. Also, a fun read here: https://www.bitecode.dev/p/there-is-no-eu-cookie-banner-law
m
Technically I don't have to but I am like 99% curtain google makes you do it to be the adsense program
s
I think Umbraco Forms cookies should be fine, they're necessary cookies and first party cookies, not subject to GDPR laws. The information you collect through forms might be subject to those laws though which is why you can add a mandatory checkbox to get submitters to agree to their data being processed by you.
Ah.. sure, it would be too much work for them to keep track so they just require you to do so. 🤷 There's some free generators out there, but I don't know how you'd effectively stop adsense from loading with those.
m
I was actually just double checking if they require it and as of Jan 26 this year they require all sites to use an aproved consent management program. I have there list and cookiebot is on there and looking st the others it looks like i am stuck paying a fee. Its nice to know I have to now pay a google partner for the privilege of serving ads on my site so I could hopefully pay the costs of having my site 🙄
Er. Maybe not. Gods this is so confusing. I found a site I think is by google saying you have to but yhere officla faq does not. Will have to look more into it when i get home from work. Hopeful they dont and then with knowing that and the infor from your link i can just forget about the banner thing and move on to the next headache
d
Yes. We have had prompts from Google to our adsense clients in various countries.
Google Tag Manager allows site management without having direct access to code. It is often used by SEO specialists. Using GTM in conjunction with a cookie optin gives you granular control over triggers. It can be easy or complex to set up depending on how many cookies are being added. Civic is about to release an automatic audit tool as well which would help explain which cookies are being set in your site.
k
We usually end up with custom implementations since we need to turn off server-side functionality in Umbraco based on consent and I haven't seen an Umbraco package that does this easily (and I'm not sure how a non-Umbraco third-party package would even do it). Things like
if (hasConsentX)
in the views/layouts etc. The automatic cookie scanners will find about half of what we want to collect consent for.
m
What server-side functionallity do you have to disable?
k
Emitting third-party stuff in views/layouts, e.g., a customer service JavaScript widget that doesn't let you turn off tracking. So perhaps "razor-side functionality" would be a better word. Stuff that may have a data collection policy that would require opt-in.
m
I see, luckly I don't have that kind of stuff. I just have to deal with AdSense and Umb Forms
k
I'm guessing AdSense requires you to implement Consent Mode which means providing opt-in for the Google stuff, but that's designed to be a client-side thing
m
I had thought it did but after some diggin on a break at work earlier I am not so sure now. I have to do more digging but I may be as lucky as just having to explain it in my privacy policy and link to there own op-in/out page all the way to potentially having to pay for Consent Management Program to deal with the opt-in/out.
147 Views