Please explain privacy settings logic

Hi,

Thank you for the inquiry.

We have updated the documentation regarding the privacy options. You can review it here.

// https://kriesi.at/documentation/enfold/privacy-cookies/#implementation-of-data-security-in-enfold

Please make sure that the site is running on version 4.6.1. And we also tried to answer your inquiry here:

// https://kriesi.at/support/topic/update-4-6-makes-cookie-consent-reload-every-time/page/3/#post-1136090

It doesn’t, as you can test here: http://enfold.muster.website/ (Open modal and klick on “Ich will hier weg!”)

The modal popup window button as the name suggests, opens a modal window containing info about the privacy option including the privacy shortcodes. It will not link to another page. If you want to create a link to your privacy page, create a new button in the privacy & cookies options panel and set the “Button Action” to the 4th option (Link to another page).

Best regards,
Ismael

Hi,

Thank you for the clarification.

We are able to reproduce the issue with the buttons inside the modal popup window. We’ll forward it to the dev team.

1.) The [av_privacy_allow_cookies] when enabled will ensure that the cookie consent bar is hidden once the user opted in, but it will not allow non-essential cookies such as cookies that can/disable videos and maps. For that, the [av_privacy_accept_essential_cookies] should be enabled.

2.) The [av_privacy_accept_essential_cookies] when enabled will add the “aviaPrivacyEssentialCookiesEnabled” and allow non-essential cookies (maps, videos, recaptcha), but it will not affect the essential cookies “aviaCookieConsent” and “aviaPrivacyRefuseCookiesHideBar” once the user opted in.

You can test this by adding the [av_privacy_allow_cookies], [av_privacy_accept_essential_cookies] and [av_privacy_video_embeds] in a test page. Below the privacy shortcodes, add a video element with a youtube URL.

3.) Just think of “green” as enabled and “gray” as disabled, so when the [av_privacy_allow_cookies] is gray, the cookie consent bar will always popup on reload because the “aviaPrivacyRefuseCookiesHideBar” is not present. If the [av_privacy_video_embeds] is gray or disabled, videos will automatically open in another tab or to an external link. If green, the video is allowed to play directly on the site.

4.) On 4.6.1, the [av_privacy_allow_cookies] and [av_privacy_accept_essential_cookies] cookies are enabled by default because a lot of site owners are not aware of it. This assumes that the user or visitor opted in or allow the use of cookies when they continue to browse the site, accept the cookies or by simply ignoring the consent bar.

There is a very big danger here for all of us. The GDPR clearly states, that the user has to be informed in clear and concise natural language what his privacy options are.

That’s why you have to enable the cookie consent message bar and add the details of the site policy in the privacy policy page. It is up to the users by then if they want to ignore the consent bar or accept the cookies.

As stated on the documentation:

It is up to you as owner of a website to ensure that your website is compliant to the rules of the country your visitors come from. You need to check this with a reliable lawyer.

// https://kriesi.at/documentation/enfold/privacy-cookies/#implementation-of-data-security-in-enfold

Best regards,
Ismael

Hi!

Thank you for the update.

1.) Yes, that’s correct. The [av_privacy_allow_cookies] add or enables the essential cookies “aviaCookieConsent” and “aviaPrivacyRefuseCookiesHideBar”. When these cookies are present, it means that cookie message bar will not re-appear once the user opt in or accepted the cookies. For non-essential cookies (maps, recaptcha, video), the [av_privacy_accept_essential_cookies] should be enabled.

2,) Yes, even I is a little bit confuse now that you mentioned it, but what the [av_privacy_accept_essential_cookies] does when it is enabled or set to “green” is add the “aviaPrivacyEssentialCookiesEnabled”, which allow the users to interact with the elements directly in the site. For example, if there is a video in a page and this cookie is not present or enabled, the user will not be able to play the video directly in the site. It will open an external link in a new tab. Same with the map, the map will not display if this cookie is not present.

If you want to see the actual script, edit the config-templatebuilder > aviashortcodes > video > video.js file. Look for this code around line 25:

else if( ! document.cookie.match(/aviaPrivacyEssentialCookiesEnabled/) )
				{
					allow_continue = false;
				}

Regards,
Ismael

Hi,

Thank you for the update.

We’ll forward your suggestions to the team. However, additional changes to the privacy option might create another wave of confusion for those who had it setup already, so we will probably stick with the current names and description. And if you’re not aware already, you can actually change the text and description of the privacy options.

lease note: if you do not like the default text that is displayed by those shortcodes you can change it by using [shortcode]Your text here[/shortcode]

[av_privacy_cookie_info id="" class=""] – adds a list about used and accessable cookies in domain with value and additional info about the cookie
[av_privacy_accept_button wrapper_class="" id="" class=""]your button text[/av_privacy_accept_button] – adds an accept cookies button
[av_privacy_do_not_accept_button wrapper_class="" id="" class=""]your button text[/av_privacy_do_not_accept_button] – adds a do not accept cookies button
[av_privacy_modal_popup_button wrapper_class="" id="" class=""]your button text[/av_privacy_modal_popup_button] – adds a button that opens the privacy modal popup window – you have to enable cookie consent message bar

========================

Wouldn’t it make more sense, to make it possible to deactivate the shortcodes and also their respective Cookies, if we don’t need them?

You can actually set the “Default Cookie and Services Option Settings” to the 3rd option so that the non-essential cookies are disabled by default. This is the most “strict” option because users will have to be aware of the implications of not accepting the cookies and not enabling the privacy options. If you’re not using those services or elements in the site, then it’s fine.

Best regards,
Ismael

Hi,

Option 1 is the behaviour before 4.6: On pageload all cookies are allowed, all services are active, user can opt out (= silent accept all).

Option 2 and 3 block all cookies and services on every pageload until user clicks the button with action “Accept settings …” (and in coming 4.6.3 there will be an action “Accept all cookies and services”). This is the must opt in.

As services need a page reload after accepting cookies to work (because js code is not loaded before) with 4.6.3 there will be an option where you can force this automatically.

In option 3 (user must opt in) the 2 shortcode toggles av_privacy_allow_cookies and av_privacy_accept_essential_cookies are preselected to be more intuitive. These 2 shortcodes enable cookies that are needed for the site to function (= esential cookies, from Enfold and from plugins like WooCommerce cart, WPML icl_… ,…).

If visitor clicks “accept” without checking the settings he has a working site without external services.

In 4.6.3 you will be able to change this to have all toggles deselected by adding to functions.php:

add_theme_support( 'avia_privacy_basic_cookies_unchecked' );

There is a button action “Do not accept ….”: This button removes all cookies, disables all services (page reload !!). Message bar is hidden on subsequent page reloads, but shown in a new window or new tab – visitor is a new visitor.

Documentation will be extended with this info.

Hope this makes things clear.

Best regards,
Günter

Hi,

If enfold cannot remove it by default settings you can define additional custom cookies (at bottom of privacy page) to monitor (and try to remove). This works for my private site for piwik cookies.

Best regards,
Günter