Ref. GDPR02

Is your feature request related to a problem? Please describe.

As a visitor when I visit a Decidim installation I could be tracked for analytics purposes, but it isn’t mentioned to me.

Describe the solution you’d like

We must offer a way to accept this tracking or to reject it.

Right now, the current behavior is a cookie warning that only shows the information that we use Cookies:

We need to explain better what cookies do we use, why we’re using these cookies, and let the user choose which cookies they want to use.

Describe alternatives you’ve considered

There are JavaScript libraries that already tackle this issue, as it’s a classic.

1. Orejime
   
   

https://orejime.netlify.app/
https://github.com/Quentinchampenois/decidim-module_cookies

3. Cookie Consent
   https://github.com/osano/cookieconsent
   https://www.osano.com/cookieconsent/download/

Additional context
Cookie Law European Union and GDPR.
See discussion on MetaDecidim
See Metadecidim proposal

We really like how this is solved in https://omastadi.hel.fi/

Does this issue could impact on users private data?
Yes, it’s about cookies and improving the (optional) tracking mechanisms that implementers can have on Decidim.

Acceptance criteria

• As an implementer when installing Decidim I have a way of enabling this setting as a module
• As an implementer, I can configure which cookies are for which purpose and which are required for the app to work