A basic privacy and cookie question

[Fab02]

Hallo everyone
I think there is something important in the concept of privacy and cookie management that escapes me.
As you know, when we make it possible to publish YouTube videos embed in posts, the issue of privacy and cookies arises clearly.
Yet, I don't see the issue being addressed. Even the phpbb Media embed plugin, official software, offers the possibility of publishing video embeds in posts without worrying about further settings that adress the issue.
In short, it's as if the problem didn't exist... and evidently I'm missing something...
Can anyone clarify my ideas?
Thanks in advance.

Fab

[Anișor]

It’s a bit hard to manage third party cookies it is an issue indeed.
The best you can do is maybe embed the videos with privacy-enhance mode which will limit tracking cookies until the user interacts with the video.

You can use this by adding “?rel=0&showinfo=0&autohide=1” to the link of the video.

You can probably also add a popup to let the users now before loading the youtube videos and if they accept or not to see the link/embeded video.

Edit: the safest method maybe would be to host this videos on your website but that would take a lot of space.

[warmweer]

...
As you know, when we make it possible to publish YouTube videos embed in posts, the issue of privacy and cookies arises clearly.
...

Which specific issues are your referring to?

[Fab02]

It’s a bit hard to manage third party cookies it is an issue indeed.
The best you can do is maybe embed the videos with privacy-enhance mode which will limit tracking cookies until the user interacts with the video.

You can use this by adding “?rel=0&showinfo=0&autohide=1” to the link of the video.

You can probably also add a popup to let the users now before loading the youtube videos and if they accept or not to see the link/embeded video.

Edit: the safest method maybe would be to host this videos on your website but that would take a lot of space.

that code solves the problem if only I inserted the videos... but as you know, the users also do it... so I'd stay at the beginning.
I absolutely agree about the popup...but I have no idea how to do it. I'm not a programmer....

Fab

[danieltj]

You're venturing into the realm of custom coding here really. Using third party services requires you as the board admin to assess the risks of doing so and implement something that allows users to opt in or out of tracking cookies.

I appreciate that something may be a core feature to allow you to do something but the onus falls on the board admin to ensure that any third party services being used are done so in a way that satisfies your legal obligations.

Basically: you'll need to ensure when people embed YouTube videos, there's some kind of check in place for the user to confirm cookies or not before the video is loaded. Having said that, if you have a cookie banner, that should serve somewhat as a reasonable solution to the use of YouTube cookies.

[Fab02]

...
As you know, when we make it possible to publish YouTube videos embed in posts, the issue of privacy and cookies arises clearly.
...

Which specific issues are your referring to?

YouTube videos, when inserted into a site, release cookies that collect statistical data which should be managed in accordance with the laws.

Fab

[Fab02]

Basically: you'll need to ensure when people embed YouTube videos, there's some kind of check in place for the user to confirm cookies or not before the video is loaded. Having said that, if you have a cookie banner, that should serve somewhat as a reasonable solution to the use of YouTube cookies.

...but that's exactly what I'm trying to say....
The need for a cookie banner is clear, but I don't see native solutions to a real problem...nor popular extensions to solve it.
And this seems unlikely to me, given the diffusion of phpbb and the ability and competence of those who deal with it.
This is why I think I'm missing something...

Fab

[danieltj]

You can enable a cookie banner via the Admin Control Panel.

Go to the ACP Cookie Settings Cookie Notice (enable).

phpbb-acp-cookie-settings.png

[Anișor]

I can help you out with this if I have time this evening it’s just a simple piece of javascript I reckon.

[ssl]

No doubt with this extension: https://www.phpbb.com/customise/db/exte ... e_manager/

[Fab02]

You can enable a cookie banner via the Admin Control Panel.

Go to the ACP Cookie Settings Cookie Notice (enable).


phpbb-acp-cookie-settings.png

...I missed it and I thank you!
...but this is the simple warning that also appears on this forum and I don't think it resolves the matter...because it is a system that resolves the issue of cookies based on how the forum was "created" and not based on what you can add, like youtube videos.
There are no third parties here on this support forum we are writing on now.
Instead, on any site that hosts Google Adsense or some form of advertising, or YouTube videos themselves, correct information allows you to accept or reject the different types of cookies that come from third parties, choosing among them what you accept. ...you must have noticed it.

Fab

[Fab02]

No doubt with this extension: https://www.phpbb.com/customise/db/exte ... e_manager/

I noticed it...but I also noticed the number of downloads...only 2484.
A figure too low compared to the real need... and I suspected that it wouldn't solve the problem.
Do you think it solves it?

Fab

[Fab02]

I can help you out with this if I have time this evening it’s just a simple piece of javascript I reckon.

...and i thank you!
But, before, it's interesting to know what you think about that extension...
https://www.phpbb.com/customise/db/exte ... e_manager/


Fab

[ssl]

What does this have to do with the number of downloads?

This extension use Klaro script, so read this

Contextual Consent

This tutorial explains how to use Klaro's "contextual consent" feature, which enables you to ask for the users' consent before showing e.g. embedded Youtube videos or other content. The consent notice you see on this page demonstrates how this mechanism works.

https://klaro.org/docs/tutorials/contextual_consent

[Fab02]

What does this have to do with the number of downloads?

...nothing, of course
I only had the problem that since the number of downloads was not very high compared to the audience, this could mean that it didn't solve the problem.

I visited the klaro.org link and I think you are right. Thank you

Fab