Blog

The evolution of the cookie banner

Since 2018 the evolution of the cookie banner has been through dramatic changes. Here's what a cookie banner should look like in 2020.

It started very simple

In the beginning… All you needed was to inform the users that they would be subjected to “cookies”, just by using your website. That sounds nice… Who doesn’t like cookies? Very simple and nobody got any wiser.

First of all, most people have no idea what cookies are about or what they are used for, so many websites also informed their users about this technology the same way they informed about the privacy policy, by providing a link to a page on the website dedicated to explaining what cookies are about.

We expect that most people completely ignored it and went on their way. Clicked the “accept” button and continued using the website.

Free_cookie_consent_banner_GDPR

A simple banner with simple mechanics

Most websites quickly adopted the idea of having a cookie-banner displayed on their website, most of them consisting of a headline, a small paragraph, and the call to action button to make the annoying thing go away. Over time, users also got used to having these banners popup and quickly closing them down, like a whack-a-mole game.

Under the hood, the technical requirement also wasn’t that high. A few lines of javascript to set a cookie in the browser so the banner, wouldn’t be displayed again after closing it down.

The EU said, let there be GPDR

Along came GDPR and soon to follow its much nerdier cousin, ePrivacy.

Over the past couple of years the informational requirements of the banner, including the technical functionalities has become much more advanced. Going from one singular button to multiple buttons, toggles or checkboxes, and instead of minimal text to now having a legal essay explaining how the website come in peace and do not wish to harm anyone, but would be very glad to get a like and a thumbs up to the use of cookies… Please do not decline… Pretty please!

Besides just explaining to the users that the website is setting cookies on their device, you actually need to inform them of which exact cookies AND what their purpose is. This task can either be a walk in the park for a very simple website or a continuous pain in the… You get the point.

The problem is that each external service you’ve ever implemented on your website most likely sets one or more cookies. For example, Google Analytics sets over 3 different types of cookies. That same goes for Facebook Pixel.

You could of course manually go through all of the pages of your website, one by one, look in the developer console, write down each cookie and their associated data, research to which service they belong to and finally present a nice table of your findings to your users until the next time you do a major change on your website and you have to do it all over again… BREATH… Sound about as much fun as waiting in line at the airport, just to have your flight canceled at the gate.

Nobody want to be first-movers

To be honest becoming completely compliant is not a game that anyone is standing in line to sign up for.  It’s a game where everyone is looking at the other guy to see if they move and think if they also should move along until local legislation forces everybody to JUMP!

Each time a legal cases all across europe come up, the consent popup get molded just a little bit more, to include more. do more and each time the website need to keep up with these legal “trends”. Oh! and did I mention the checkboxes. No, they can NOT be ticked by default. Case closed!

Old & illegal
New & legal

Illegal consent pop-up

overlayv2

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.

References

Share on facebook
Facebook
Share on twitter
Twitter
Share on linkedin
LinkedIn
Share on email
Email
Where to start with cookies?

Join our webinars about compliance in the Nordics