Hacker News new | past | comments | ask | show | jobs | submit login

Very true, that can't be stressed enough. One note though:

> The fact that your site uses cookies is irrelevant, and there's no need to tell anyone.

Let's not forget the infamous ePrivacy directive, e.g. Recital 66:

"Third parties may wish to store information on the equipment of a user, or gain access to information already stored, for a number of purposes, ranging from the legitimate (such as certain types of cookies) to those involving unwarranted intrusion into the private sphere (such as spyware or viruses). It is therefore of paramount importance that users be provided with clear and comprehensive information when engaging in any activity which could result in such storage or gaining of access. ... Exceptions to the obligation to provide information and offer the right to refuse should be limited to those situations where the technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user."

Of course, the relationship between GDPR and the old ePrivacy directive is rather ambiguous.

Applications are open for YC Summer 2019

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact