[FEATURE] GDPR Compliant Cookie Consent

[asyrewicze]

Describe the feature you want 描述你的功能需求

The cookie consent banner is a good starting point, but it appears to simply inform the user that the site uses cookies and then links them to a site about cookies.

GDPR requires that sites provide the user a choice of Opt-in and Opt-out if their personal data would be collected. For example, GDPR sees things like geography and IP as personal information, so addons like google analytics would be in violation of GDPR unless the site gives them the option of opting out.

Is it possible to update cookie consent in the theme to allow the reader to "allow" or "decline" 3rd party cookies? The expected behavior for clicking "decline" would be to prevent analytics tracking and logging of that session's data. "Allowing" or opting in, would allow tools like google analytics to operate as normal.

Useful reference 有价值的参考

example here
another example

[asyrewicze]

As a follow up, I did end up switching to Umami as my analytics provider which is compliant with GDPR regulations. That said, it would be nice to have a mechanism in the theme to allow for consent when using google analytics, but I know that's extra work as well - so I understand if you'd like to simply close the issue.

Either way, thank you for you work on this theme!

[HEIGE-PCloud]

GDPR compliance is a complicated topic. I don't think I have enough knowledge to implement it correctly. I think people who worry about compliance problems should do their own research or consult a lawyer.

That said, making the cookie banner display a rejection button and expose an API allowing users to customise it themselves can be useful.