eStore european laws and cookies

[formulalopd]

The european and spanish laws about cookies force us to imform our visitors about the cookies we generate withs our web sites.

What I would like to know is:

-What cokies are generated by your plugins ( emember, estore, affiliate )

-Are cookies needed to run your applications?

I have seen in Chrome and Firefox

emember in use

estore submit payment

Thanks and regards

Iñaki

[wzp]

Web browsers are intrinsically “stateless,” meaning the current page has no memory of what happened on or with the last page. “Cookies” are used by the plugins to transfer a record of user actions from one page to another.

The plugins use two kinds of cookes; “browser” and “session.” Browser cookies are stored on the user’s computer and session cookies are stored on your server (and are undetectable by the user).

In the case of the affiliate plugin, a browser cookie is created whenever a user clicks on a link containing an affiliate ID; when target page is loaded. This cookie stays in the browser for 21 days (default), but can be adjusted.

https://support.tipsandtricks-hq.com/forums/topic/re-cookies

In the case of eStore, both browser and session cookies are used. They are required so that eStore can keep track of the user’s cart, payment processing status, and encrypted link activation.

In the case of eMember, like WordPress itself, browser cookies are required to keep track of the user’s login status.

There may be other required uses, but these are the primary ones.

My understanding of the law is that only disclosure is required; not opt-out, because without cookies, none of the functions you are looking for can be accomplished. For example: a site like amazon can’t run without using cookies.

In the case of eStore and eMember, disclosure can easily be added to the Terms & Conditions, when an item is either added to the cart or the user registers for an account. In the case of Affiliate, it’s kind of tricky; because the cookie is created when the target page is served to the user, and would have to be disclosed “after the fact.”

[Katiska]

That rule isn’t EU-wide-law. Some European countries are using it, some advising to do it. Nordic countries (Finland, Sweden, Norway, Danmark) just doesn’t care because of if a site is collecting data of humans, computers or IPs doesn’t apply, the owner/admin of the site must tell it in the Terms & Conditions – why, who can use it, protection and so on.

[Author]

Posts