Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CON&TP]: Cookie banner and Data Privacy Policy (Pr.1) #783

Closed
astkhikatredi opened this issue Sep 15, 2023 · 21 comments · May be fixed by #836
Closed

[CON&TP]: Cookie banner and Data Privacy Policy (Pr.1) #783

astkhikatredi opened this issue Sep 15, 2023 · 21 comments · May be fixed by #836
Assignees
Labels
Area/frontend [react] in the client side application Priority: High This ticket has a high priority Task

Comments

@astkhikatredi
Copy link
Contributor

astkhikatredi commented Sep 15, 2023

Context/background

We would like to implement a GA4 as a DA tool for our platforms.
In order to use it we need to insert cookie banners on our platforms and update a data privacy policy.

What needs to be done?

  • Develop and add the banner to our platforms (there is a discussion about the new banner for the ReDI Website, potentially we can use the same)
  • List all cookies, their purpose, and the duration of storage retention in the cookie section of the data privacy policy and to update the text mentioning our platforms (now it contains info only about ReDI Website)
  • Update the data privacy policy

We can use Squarespace cookie banner as an example

Eric's comment: maybe there’s some js/react lib we can use. We’d also need to look at how we can make one banner simultaneously allow/block all third-party tracking (AFAIK HotJar, Google Fonts and GA).
Anil's comment: website to help to customize cookie banner and to understand GDPR rules about giving an option to users to change cookie settings

@astkhikatredi astkhikatredi changed the title [CON&TP]: Cookie banner and Data Privacy Policy [CON&TP]: Cookie banner and Data Privacy Policy (Pr.1) Sep 15, 2023
@katamatata
Copy link
Contributor

The potential library we could use - js-cookie.

@astkhikatredi astkhikatredi added the Priority: High This ticket has a high priority label Nov 22, 2023
@ericbolikowski
Copy link
Contributor

@astkhikatredi did some research! Status quo & a few questions here: https://www.loom.com/share/abd17f0613d34aadbbe2902e9494e727

@astkhikatredi
Copy link
Contributor Author

Thanks a lot @ericbolikowski for this!
Could you please share the website with me? I will make sure to review it on Monday

@ericbolikowski
Copy link
Contributor

@astkhikatredi
Copy link
Contributor Author

Hey @ericbolikowski
Thanks for the video explanation, for the website, and for the research you've done!
Let's use this, I think its a great solution.
Tell me what I need to do from my side to complete this ticket and move forward.
Thanks a lot!

@astkhikatredi
Copy link
Contributor Author

astkhikatredi commented Dec 18, 2023

@ericbolikowski I did some research and talked to a good friend chat GPT and here is something we can use.
What do you think?

Cookie banner text ror CON:
Welcome to ReDI Connect. To create the best mentoring experience on ReDI Connect, we use cookies. These cookies are crucial for the smooth operation of our platform and provide insights into how you engage with mentoring content.

Cookie banner text for TP:
Welcome to ReDI Talent Pool. To enhance your experience on Talent Pool, we use cookies. These cookies are vital for the seamless operation of our platform and offer insights into how both companies and job seekers engage with talent-matching content.

For both of them:

Your Choices Matter:
Click "Accept" to allow the use of all cookies. If you prefer a personalized approach, select "Cookie Settings" to manage your preferences.

Cookie Settings:
Here, you can choose which types of cookies you want to enable. Note that certain cookies are fundamental to maintaining the functionality of our platform.

@ericbolikowski
Copy link
Contributor

Done! I've coded it for CON. Some questions about more text: https://www.loom.com/share/9648c9d32e5d4809bb01ed18c1e455e8

@astkhikatredi
Copy link
Contributor Author

Hi @ericbolikowski, thanks for the video and I am so-so happy to see that we are almost on the finish line with this/

1. Question: by default both: Essential and Performance and analytics cookies are activated, right?

2. And here is the text suggestion, this could be used for both platforms:

Manage Cookie Preferences

At ReDI School, we value your privacy and strive to provide you with control over your online experience. Please customize your cookie settings below to align with your preferences.

Performance and analytics:
Enable these cookies to help us improve our platform by collecting and reporting information on how you use it. The data is anonymized and cannot be used to identify you.

3. Also, could we insert this before the banner names? Now when I see it live- It's not clear that the banner is about cookies.

🍪 Cookie Information: Welcome to ReDI Connect.
🍪 Cookie Information: Welcome to ReDI Talent Pool.

@ericbolikowski
Copy link
Contributor

Let me know :)

@astkhikatredi
Copy link
Contributor Author

Thanks @ericbolikowski, looks great!!

We would also need to update a data privacy policy and I see how info about cookies for ReDI website is written there (page 21), do you think we do the same for our platforms?

  • I found this for Hotjar
  • For GA4 we can use the same that is written on page 22 of the data privacy policy

Any other tool?

Thank you!

@katamatata katamatata linked a pull request Jan 5, 2024 that will close this issue
@ericbolikowski
Copy link
Contributor

Hi @astkhikatredi,

About this:

  • Unsure whether it's clear: a single Data Privacy Policy applies to both CON, TP and the main ReDI Website. The text is published on the ReDI website, and the sign-up form on both CON and TP links to it.
  • I didn't 100% understand exactly what needs to be updated in the policy. AFAIK we need to make sure it covers: Google Analytics, Hotjar, Sentry, and Google Fonts API. These four services, not more, not less, are the ones that are "turned on" when the user accepts all cookies.

Is this what you need in order to update the data privacy policy?

@astkhikatredi
Copy link
Contributor Author

Guten Morgen dear @ericbolikowski

  1. Correct
  2. In our data privacy policy we should put info about the cookies that Google Analytics, Hotjar, Sentry, and Google Fonts API use. So I suggest we put it in the same way as it's written for Squarespace on page 22.

Here is what I found:
Hotjar: Data Privacy is here and Cookie policy is here
Sentry: Data Privacy with information about Cookies is available here
Google Analytics: Data Privacy is here and Cookie policy is here
Google Fonts API: Data Privacy with information about Cookies is available here

What do you think?

@ericbolikowski
Copy link
Contributor

Sounds reasonable. The way Squarespace is worded it seems we should at least mention the purpose of each tool. Here's a quick go at that:

  • Hotjar: collect anonymized usage/insights data, and conduct surveys
  • Sentry: automated bug detection
  • Google Analytics: how do we make this sound not evil?
  • Google Fonts API: make text appear in certain fonts so it matches our designs

@ericbolikowski
Copy link
Contributor

However, is there someone at ReDI more knowledgeable about these kinds of Policy documents that we can consult? I'm just answering the above as a layperson, this is outside of my expertise

@ericbolikowski
Copy link
Contributor

@astkhikatredi do you think we're ready to go live with the cookie banner?

@astkhikatredi
Copy link
Contributor Author

Hey @ericbolikowski,

I updated the policy yesterday and am waiting for a reply from Mireia. She should communicate those changes to the DPO to get confirmation. Let's wait until tomorrow, please (although I want to go live with this sooooo much).

In the meantime, I realized that the Cookie Policy links on the footers of both platforms are misleading. Let's delete them since we mention cookies in the Data Privacy Policy.
image
Thank you!

@ericbolikowski
Copy link
Contributor

Great! Can you let me know when you hear back? Then I'll delete the links + go live in one go. In the meantime working hard on the three dots menu for job postings 💪

@astkhikatredi
Copy link
Contributor Author

@ericbolikowski sounds like a great plan!

@katamatata katamatata added the Area/frontend [react] in the client side application label Apr 16, 2024
@astkhikatredi
Copy link
Contributor Author

astkhikatredi commented Apr 19, 2024

Here is the final update after the final discussion with DPO (please don't deploy until I confirm, still waiting info from Mireia):

  1. Please change the text marked blue in "Manage cookie preferences" (see screenshot) to: At ReDI School, we care about your privacy and want to give you choices about your online experience. You can adjust your cookie settings below to match what you prefer. You can withdraw your consent at any time via clicking a button in the footer of the website. For more information about cookies please refer to our Data Privacy Policy.
image
  1. The button in the footer of the platforms called "Cookie policy" to be renamed to "Cookie Settings" and upon clicking should open a cookie banner again. This gives our users the possibility to change their consent.

@astkhikatredi
Copy link
Contributor Author

Dear @ericbolikowski we can deploy this finally, please take into consideration my last comments. Thank you!!

@ericbolikowski
Copy link
Contributor

Deployed!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Area/frontend [react] in the client side application Priority: High This ticket has a high priority Task
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants