Forum Moderators: martinibuster

Message Too Old, No Replies

Google AdSense and Cookies (Cookie Law) email

EU Cookies

         

Badger37

1:35 pm on Jul 27, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



Hi all,
I've just received an email from Google regarding AdSense and Cookies.
Cookie Law came in a couple of years ago and seems mostly to be a waste or time and just another irritation to website visitors. I was hoping that it would quietly go away!

The email from Google reads as if you now have to implement a 'consent mechanism' if you have already - are other people receiving these emails and what are peoples views (especially if they are in the UK like me).

I've put the Google email text below.
Thanks.



Google Ads Policy Team
Dear Publisher,

We want to let you know about a new policy about obtaining EU end-users’ consent that reflects regulatory and best practice guidance. It clarifies your duty to obtain end-user consent when you use products like Google AdSense, DoubleClick for Publishers and DoubleClick Ad Exchange.

Please review our new EU user consent policy as soon as possible. This requires that you obtain EU end users’ consent to the storing and accessing of cookies and other information, and to the data collection, sharing and usage that takes place when you use Google products. It does not affect any provisions on data ownership in your contract.

Please ensure that you comply with this policy as soon as possible, and not later than 30 September 2015.

If your site or app does not have a compliant consent mechanism, you should implement one now. To make this process easier for you, we have compiled some helpful resources at cookiechoices.org.

This policy change is being made in response to best practice and regulatory requirements issued by the European data protection authorities. These requirements are reflected in changes that have been recently made on Google’s own websites.
Thank you in advance for your understanding and cooperation.
Regards,
The Google Policy Team

martinibuster

2:11 pm on Jul 30, 2015 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



I wouldn't use that app.cookieassistant.com mentioned earlier by vegasrick because it adds invisible link to your <body


It's not an invisible link. It's a JavaScript call to download their widget code. However there is a visible link that is printed in the pop-up. Similar to most "free" widgets like AddThis, there's going to be a link to another site to download files plus sometimes a visible link to the provider. It's up to you to decide if this is what you want or you can find or code one that his hosted on your site.

There are plenty scripts for pop-ups for this purpose, most script resources have them for sale for a minimal price.

Badger37

3:23 pm on Jul 30, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



Re. app.cookieassistant.com
This script (along with many others) doesn't appear to allow Cookies to be stopped which is what Google are asking for - this makes things quite a bit trickier!


From Google's cookiechoices.org

"So if you're using third party advertising services, such as Google AdSense, you'll need to take steps to integrate your preferred solution with the advertising tags on your pages to make sure your users' preferences are respected. Each vendor offers instructions or support services for doing this. If you don't follow these steps for all the tags on your pages, you risk misleading your users: they will think they’re switching off advertising cookies when in fact advertising cookies will still be used. Therefore, test carefully any implementation of these tools on your own site."

As others are saying it seems Google might be testing the water.
Surely if they are serious about every AdSense publisher doing this they would be helping them more OR changing their own Cookie usage to make AdSense work for the EU?

If they leave things as they are and start banning none compliant websites they'll end up doing serious damage to their own ad business!?

Hopefully things will become clearer but it's a mess at the moment...
Some more info from Google would be nice!

dolcevita

4:38 pm on Jul 30, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Is there any other way to show Adsense without sending cookie?I mean script that allow showing of Adsense and in the same time prevent Adsense of sending cookie until visitor approve or disapprove. I think That Adsense works fine with browser not accepting any kind of cookie.So there should be probably script allowing dispaying od Adsense to visitor and in the same time prevent sending of Adsense cookie until visitor approve or disapprove.

threesixandnine

10:31 pm on Jul 30, 2015 (gmt 0)

10+ Year Member



It's not an invisible link. It's a JavaScript call to download their widget code. However there is a visible link that is printed in the pop-up. Similar to most "free" widgets like AddThis, there's going to be a link to another site to download files plus sometimes a visible link to the provider. It's up to you to decide if this is what you want or you can find or code one that his hosted on your site.

There are plenty scripts for pop-ups for this purpose, most script resources have them for sale for a minimal price.


No, it's not a call to javascript. It's link infused below javascript. Try it for yourself. Generate the code and you'll see it prominently there in pure html. Generate a few times and you'll see different sites it links to. I tested the code and it work without these links so all good huh. I wish they only told their users that the code will infuse hidden link.
I found three sites that it links to : popstrap.com, ranktrackr.com and cookieassistant.com

When I installed it and tried I didn't see the link to these sites but it was in the code. I might be missing something here though.

charvel

8:55 am on Jul 31, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



Regarding UK's stance where implied consent is acceptable, I think Google's policy wording is sufficiently (and deliberately?) vague enough to accept implied consent.

"obtain consent to, any data collection, sharing and usage" - As implied consent is acceptable in the UK, a message stating that the site uses cookies and that you accept this by using it, satisfies what google is asking for. The wording obviously means something different for sites in/targeting other parts of the EU, so in my mind it's saying "adhere to the rules of your location"

I'm guessing google checks where your site is targeting and decides if an email is required, I can't believe for a second that the EU has, or ever will have, the influence to make all american sites display a message on a site that targets american traffic but happens to get some EU visitors. The only way to control that would be to do what China/North Korea does.

dolcevita

9:08 am on Jul 31, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



All my sites targeting USA but i live in EU.85% of traffic come from USA but i have received email as probably all others from EU.Email from a couple days a go does not check where from come traffic to your website but where You live.They guess That your site Is probably targeting There where You live.But apart from That cookie rules Is for any website anywhere in the world which have visitors from EU.I guess That even if You have 1 visitor from EU rule apply to your website.

dolcevita

9:16 am on Jul 31, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



And a couple note about GEO filtering.I run one of the biggest site dedicated to finding and looking to locations based on IP adresses and i Can tell You That filtering countries based on location Never cover 100% all visitors from certain country or continent.IP address and IP ranges are dynamical and they may change not only state or city but sometime whole continent.So even if You décide to block EU You Can still except at least a couple hundred visitors from EU each month and You Will also block some innocent visitors from continent which do not belong to EU.

kireb

9:44 am on Jul 31, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



What will be the chance that Google itself gives us some script to handle this issue? I mean its about their cookies.

piatkow

10:34 am on Jul 31, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month




I can't believe for a second that the EU has, or ever will have, the influence to make all american sites display a message on a site that targets american traffic but happens to get some EU visitors.

This isn't you complying with EU law, it is about complying with a change to the Adsense ToS.

vordmeister

11:13 am on Jul 31, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



I've just had a reply from my European Member of Parliament. Among other things he believes that 'zombie cookies' replicate and send out information from your computer, and that cookies can steal your banking data. I have replied to try to correct a few points.

It is frightening that they don't know what a cookie is, and perhaps even more frightening they believe malicious websites will provide a clear privacy policy before sending a virus.

If you are in Europe it might be worth writing to your Euro MP Nothing will happen (it's Europe) but if we can educate our MPs at a local level they might at least make the next stupid law a bit less stupid.

netmeg

12:39 pm on Jul 31, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Personally, I think it's Google trying to make a point and say FU to the EU. We're just the collateral damage.

ember

1:10 pm on Jul 31, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Google might be testing the water.


Sounds plausible. I still haven't gotten an email and if I didn't come into this forum would have no idea about this upcoming requirement. Think of the thousands of mom and pop U.S. adsense advertisers who never visit a forum. They probably have no clue about this and are soon to lose their accounts because they might receive a stray European visitor after September 30th? Seems a little out there.

dolcevita

3:05 pm on Jul 31, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Policy team so far I know never take directly account from any publisher.They send always email to warn you about policy that you need to follow with 4-5 weeks time to make necessary changes. And if they disable your account you can always make changes and they will activate your account again.It s from my own research based on PII policy and warning emails.

dolcevita

3:23 pm on Jul 31, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Changing their own Cookie usage to make AdSense work for the EU like me the best solution for millions publisher which does not have any idea what to do here. I hope that they will do it.

james007

10:26 am on Aug 1, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



I have copied what the UK Government does itself on its main website: on first page of first visit (only) put up a line at the top of your page saying "This site uses cookies to make it work better [Learn more]". The Learn More goes to a page about how we use cookies. This, incidentally, is one line of JavaScript that looks for the presence of a Google Analytics cookie. If it's not there, show the message. Easy.

In addition, I also state on logging in that this means we will put a personal cookie on your machine. The UK Government doesn't even do this.

And that's it. I'm doing MORE than the UK Government.

This isn't a big deal.

Amazon, incidentally, simply puts a "This site uses cookies" towards the top of their website...

Zygoot

5:29 pm on Aug 1, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Interesting idea to check what the government does. I just checked one of my local government pages (which uses Google Analytics) and all they have is a blurb about cookies hidden somewhere in a hard to find disclaimer page.

RedBar

5:45 pm on Aug 1, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Interesting idea to check what the government does.


I do similar to the "powers that be" in my top navigation:

[europa.eu...]

If Google doesn't agree with this then they can go pfffttttt

EditorialGuy

10:37 pm on Aug 1, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Our site doesn't plant cookies. If Google does, then it needs to figure out an opt-out mechanism for users.

Badger37

10:33 am on Aug 2, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



Last time I looked the UK Gov wasn't running AdSense though ;)

This thread is specifically looking at Google and AdSense - not particularly the EU's Cookie stance - more about keeping Google happy with AdSense publishers after their recent announcement...

RedBar

1:08 pm on Aug 3, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Last time I looked the UK Gov wasn't running AdSense though ;)


That is not a UK government website.

Our site doesn't plant cookies. If Google does, then it needs to figure out an opt-out mechanism for users.


Precisely, it is Google's problem, trying to pass this off as a publisher issue is a denial of their responsibility.

engine

1:22 pm on Aug 3, 2015 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



Our site doesn't plant cookies. If Google does, then it needs to figure out an opt-out mechanism for users.


That may well be the case, and if you weren't running AdSense, you'd be fine. When someone visits your site there will be a cookie, so it's up to you to comply with the local laws, no matter how stupid, or badly thought through.

ChanandlerBong

7:44 am on Aug 4, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



Yes, Google are taking an easy way out here, and there may be something political in their decision, but you can't wash your hands of it. If you want to participate in their game, you play by their rules. It doesn't matter what other sites do, what the UK govt sites do or what the website of the Toulouse Housing Department do. It only matters what G is telling you to do.

you of course have the option of taking all AdSense code off your pages if you feel so strongly about it...

vegasrick

7:48 am on Aug 4, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



I've yet to receive any emails from Adsense to implement this, neither have any of my friends with U.S. based websites. Some of my friends who are based in Germany and the UK have been directed to comply.

In fact, none of them even heard about this until I brought it up and I would have never heard about it if I wasn't a member here.

vandread

12:47 pm on Aug 4, 2015 (gmt 0)

10+ Year Member



For me the main question is whether Google requires implicit or explicit cookie acceptance. If it is the latter, it will have a disastrous effect on visits and earnings I'd assume.

vordmeister

4:34 pm on Aug 4, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



If US publishers didn't receive the email I guess this is only a requirement for EU publishers. If I were in the US I would just sit back and enjoy the thousands of new visitors you are going to get when EU based websites become too annoying.

Implementation needs thinking about. Google says you should consult your lawyer about implementation details and links sites with example code which use pop-ups. The EU rarely offers advice about how to comply with their laws, and they are implemented differently from country to country anyway.

In the UK we have been able to ignore the law up until now. I have a clear privacy policy and linked it from the footer of each page. I don't feel comfortable adding a "breaking news - we got cookies" pop up.

Some sites I have seen offer a thin strip above the header that mentions cookies or a fixed footer pinned to the bottom of the browser. I don't know whether those would satisfy Google's requirements, but in the absence of other guidance I'll probably try one of them and see if anyone complains.

Though the other half just complained to me about cookies (without prompting). Turns out on an iphone the screen is small and the cookie message on some sites fills the screen. You have to accept because there is no room left on the screen to look at the privacy policy.

The one thing I will do is make it clear in that header or footer that it is the EU that requires it to be there. The privacy policy linked will provide further details of why the requirement is badly thought out might make EU websites more annoying and less competitive worldwide. We get a vote in the UK about whether to get the heck out of the EU so at least the requirement for an annoying thing on every page is well timed.

Badger37

5:11 pm on Aug 4, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



@vordmeister
Adding a notification isn't so bad - I'm struggling with Google's request to ensure you have a mechanism is place to reject cookies if that's what the visitor decides!

Google links to Sliktide as a recommended (free) solution.
Their original v1 looks like it allows cookies to be blocked, but the latest version (v2) is far simpler and just links to an info page or similar.

I've tried asking Silktide (twice) via Twitter if they think v2 is compliant - but nothing back :(
[twitter.com...]

I also tried asking Google's AdSense Twitter account for guidance - but not a peep...

Google's own cookie prompt also only points to an info page rather than a one click "stop cookies on this website" option. So you would think that's good enough - but that's NOT what they are asking for AdSense publishers to do!?!

vordmeister

5:47 pm on Aug 4, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



I'm not a lawyer but a consistent offender who knowingly breaks the more stupid laws every day so my advice might not be the best.

My reading of the Google stuff is if you offer an "I disagree" button which once clicked allows the visitor to continue using the website then the website should respect the visitor's privacy choice and not serve cookies. The way around that is surely to only offer an "I agree" button. That way there is no expectation from visitors that they will not receive cookies.

The actual law will vary from country to country. Are you Dutch?

vegasrick

5:54 pm on Aug 4, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



Based on people who I've spoke to, you are NOT obligation to post an option to opt-out of cooking serving. For the people mandated to make this move, you have to disclose the use of cookies to your EU traffic and have a link that further explains the cookie use...nothing more, nothing less.

denisl

7:42 pm on Aug 4, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



So is there an easy way to deny access to a site if the visitor does not agree to accept cookies - after all, I dont want to provide the valuable information on my site for free. Has anyone done this? Did it hurt you rankings.

trebuchet

7:57 pm on Aug 4, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I've referred this to a former colleague of mine (UK lawyer, specialises in IP/internet matters). I'll wait for his feedback. I spent most of a day reading about it and it nearly gave me an aneurysm.

If there's an easy option I'll take it. If not, I'll add cookie acceptance to my site T&C and then nag/block EU visitors until they either accept or go away. I'm already nag/blocking adblock users, and my EU traffic is negligible anyway. A thousand poxes on the idiots who thought up this law.
This 431 message thread spans 15 pages: 431