# GDPR countdown and compliance

**URL:** https://meta.discourse.org/t/gdpr-countdown-and-compliance/87190
**Category:** Community Building
**Tags:** gdpr
**Created:** [May 10, 2018, 7:08pm UTC](https://meta.discourse.org/t/gdpr-countdown-and-compliance/87190 "2018-05-10T19:08:03Z")
**Posts on this page:** 1
**Showing post:** 79

<div class="post-metadata">

### Author: ![angus](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/angus/32/341715_2.png) [@angus](https://meta.discourse.org/u/angus)
#### Post date: [May 26, 2018, 10:58am UTC](https://meta.discourse.org/t/gdpr-countdown-and-compliance/87190/79 "2018-05-26T10:58:54Z")

</div>

> [@arnie](#):
>
> How about handling all cookies that are present at Discourse including third-party cookies

This has been discussed in some depth here:

> [@Cookie compliance under GDPR](https://meta.discourse.org/t/cookie-compliance-under-gdpr/85275):
>
> I would like to start a conversation on how to become GDPR compliant with regards to the use of cookies. There was an old topic on EU cookie compliance here, [https://meta.discourse.org/t/compliance-with-eu-cookie-law/17727](https://meta.discourse.org/t/compliance-with-eu-cookie-law/17727) …but GDPR is a completely different requirement. While EU cookie compliance only required a statement placed at the bottom or at the top of the website, that lets the user know cookies are being used, GDPR requires giving the user a real and informed choice. Cookies can be…

tl;dr: Cookie use in standard Discourse is either non-user-specific or or falls under the ‘legitimate Interests’ basis of data processing and storage, rather than consent. If you’re using third-party services, such as analytics or ad-based services, you may need to obtain consent. In the topic I linked to, there’s some examples of using purpose-built services to obtain consent for cookie use.

To your specific point about notices, you can provide a statement about your cookie use in your [privacy policy](https://meta.discourse.org/privacy), in a globally pinned topic and / or in a [banner](https://meta.discourse.org/t/banner-themes-and-instructions-for-customizing-them/82368).

---

_[View the full topic](https://meta.discourse.org/t/gdpr-countdown-and-compliance/87190)._
