Cookie management options/requirements

[CPTOM]

I received and email from someone not registered on my board that says:

"Just some FYI info. The landing page asks to accept cookies on first visit but doesn’t allow rejection or setting of site performance and privacy cookies. The site should allow the visitor to block those cookies."

I have enabled the built-in "Cookie Notice" under the ACP>Cookie Settings tab and don't have any known cookies beyond those built into PHPbb.

Any thoughts/reactions regarding this email?

[janus_zonstraal]

your board isn't working without accepting cookies.
The only thing he can do is reading the posts.

[CPTOM]

Are there any tools available to help confirm that your PHPBB forum uses nothing but 'session cookies?"

Alternative, other than the advertisement extension, which I control carefully, these are my extensions. None of them should have any non-session cookies, right? I have VigLink turned off.


Advertisement Management 2.0.5
Attachment Fluff Buster 3.2.0-
Automatic Topic Subscription 1.1.0
Avatar resize 1.0.0
Header Banner 3.2.2
LMDI Multilinks 2.2.8 (no third party code here)
Obscure Contact Us 3.2.2
Pages 2.0.5 (no third part code here)
phpBB Media Embed PlugIn 1.1.2
Post Numbers 1.1.3
Prime Notify 1.0.5
Private Message info 1.0.0
Recent Topics 2.2.13
SEO Metadata 1.4.1
Share On 2.0.1
Simple mentions 1.0.5
Thanks for post 2.0.7

[Mick]

There is a standard phpBB Privacy policy that covers cookies. phpBB only uses session cookies which are used to maintain your login. There is nothing in phpBB's cookies that could be shared with other websites.

[ssl]

This ext is for you: https://www.phpbb.com/customise/db/exte ... e_manager/

[harryk]

Hi,

Our forum, like many others, has public read-only access and write access for registered users. If no user is logged in, I see no compelling need to set cookies - not even the session cookie. I realise that not using cookies in read-only mode can also entail restrictions, but this way you can do without a cookie banner. Users can agree to the privacy policy when logging in.

It would therefore be good to be able to completely deactivate cookies for read-only.