-
Posts
-
Hi there,
Just realized that there are two third-party-requests on my website which I cannot identify and for which I have no idea for what they are used for. And due to European GDPR / GSDVO I might need to specify them in my data protection policy – and therefore I need to understand them. May you please explain what the theme needs them for?
I also deactivated temporarily all plugins and my tool still finds these third-party-requests. Therefore they are not caused by the plugins.
Any idea?
Thank you!!!Hey mai,
Thank you for the inquiry.
Looks like a script to prevent spam or fraud, so it’s possible that the scripts were added by WordFence. Do you see these scripts when the security plugin is disabled?
Best regards,
IsmaelHi Ismael,
Thanks for your reply, But even when I turn Wordfence off this third-party-request does show up.
Any further ideas?Hi Ismael,
Thanks for your reply, But even when I turn Wordfence off this third-party-request does show up.
Any further ideas?Hi,
Thank you for the update.
Those scripts were not added by the theme. Did you subscribe to a CDN? Maybe it’s an additional security feature of the CDN server.
Best regards,
IsmaelHi Ismael,
What is a CDN? And how might I have subscribed to that? If this is done to a plugin then clearly no. I have turned off all plugins and this third-party-request thill shows up.Besides there still is a first-party-cookie although I have turned off all cooies through the cookie messagebox.
Hi,
Where are you hosting the site? Please post a user account for the dashboard so that we can check the site further.
CDN stands for Content Delivery Network and what it does basically is it create duplicates of an application, deploy them to different servers and make the application or site more accessible to users or clients across the globe.
Best regards,
IsmaelHi Ismael,
Seems like I took a step forward: They are caused by the webapplication firewall which is included in Plesk (Atomic Secured Linux by Atomicorp – https://atomicorp.com/atomic-secured-linux-now-available-plesk-users/). When I turn this firewall off both Third-Party-Requests as well as one cookie are deactivated.
My hoster told me that it seems that this happens on Plesk with all WordPress installations (but e.g. not with Joomla installations).
I have contacted Atomicorp in order to find out what these Third-Party-Requests as well as the cookie are doing. But I was just told that I will have either pay 225$ for a one-year-support-license or have to pay 150$ per hour as such questions are not covered under my license (which is the Plesk license as the software if delivered with Plesk).
If there is anybody out there with such a license who would be willing to ask this question for me I would really be happy. Turning off a firewall probably is not a good idea. But accepting Third-Party-Requests and Cookies of which you do not know what they are doing might not be a good idea in Europe in times of GDPR either.
But to make a long story short: This is not an Enfold issue. I’d appreciate if you could leave the ticket open for comments anyhow in case there is somebody who could help me with this Atomicorp ticket. But no action necessary from your side.
Thank you!!!!
Best regards…
Hi,
Thank you for the confirmation. We’ll keep the thread open. For now, you can include these details in the privacy page — or notify the users that such cookies exist for security and by continuing to browse the site, they are implicitly giving their consent to allow these cookies.
Best regards,
IsmaelHi Ismael,
As these are not “essential cookies” (the site would definitely run without them) I have to give the user the option to turn them off. And this is not done by the cookie banner. Even if you accept “just essential cookies” on the banner this cookie as well as the third-party-requests remain active. And therefore I definitely have to find another solutiuon…
Best regards,
Hi,
You can actually define additional custom cookies in the Enfold > Privacy > Cookie Handling > Advanced Options > Additional Custom Cookies section. Add the cookie name and the cookie path, then you’ll be able to use the following shortcode inside the privacy policy page or the privacy modal popup window to create a toggle and allow your users to disable or enable the custom cookies when necessary.
[av_privacy_custom_cookie cookie_name=""] [av_privacy_custom_cookie cookie_name=""]Your text here[/av_privacy_custom_cookie]If the name of the cookie is “security-cookie” for example, then the modified shortcode will look something like this.
[av_privacy_custom_cookie cookie_name="security-cookie"] [av_privacy_custom_cookie cookie_name="security-cookie"]Toggle Security Cookie[/av_privacy_custom_cookie]Best regards,
IsmaelHi Ismael,
Thanks again for your detailed description! This helped a lot in understanding.
Are these additional custom cookies automatically non-essential cookies? Or can I somehow influence this?
Or can I influence otherwise if they are activated or deactivated on first page load???My idea is: Using the cookie logic, but hiding the cookie message bar by adding this in the function.php as mentioned in the documentation:
add_theme_support( “avia_gdpr_permanent_hide_message_bar” );But neither the test with https://webbkoll.dataskydd.net nor the developer tool in my browser does show a different cookie behaviour when following these instructions. And I also have the problem that when I check with https://www.cookiebot.com these cookies are still not classified.
Hope you can help with these settings?
Thank you!
Hi,
Thank you for the update.
They will not be classified as non-essential cookies nor they will be automatically be blocked by the theme. Users have to manually turn them on and off using the custom privacy toggle, which is why it’s important to inform your users about the cookies.
Best regards,
IsmaelHi Ismael,
Thanks for your message! But I still didn’t got this:
If they are not classified as non-essential cookies – then they are classified as essential cookies? Can I influence this?
The cookie banner options offer to turn off both “essential cookies” as well as “non-essential cookies”. But none option has influence on these ones. Does that mean they are some sort of “third classification” in between of essential and non-essential? Could be difficult to understand by users if I am right with this. What do you think?
And how can I make sure that they are not set on first page load if they are not essential and not non-essential? Should be a GDPR conform solution as we are located in Germany…
Thank you!
Hi!
If they are not classified as non-essential cookies – then they are classified as essential cookies? Can I influence this?
They are external cookies and are not generated by the theme, so they are neither essential or non-essential cookies as defined by the theme, so there’s no way for the theme to detect them by default. Users have to turn them on or off using the custom privacy toggles that you created for the them.
And how can I make sure that they are not set on first page load if they are not essential and not non-essential?
The short answer is you can’t. It’s possible but you have to create your own script because the theme can’t handle external cookies or cookies that are generated by third party scripts. Unfortunately, it’s beyond the scope of support, so you may have to hire a freelance developer.
Cheers!
Ismael
- The topic ‘Third-party-request vs. GDPR’ is closed to new replies.