Blog
How to comply with the EU Cookie Law on your Ruby on Rails website
The law
As described in the UE Directive n° 2009/136/CE, websites are required to obtain consent from visitors to store or retrieve any information from a computer or any other web-connected device, like a smartphone or tablet. More specifically, the legislation is targeting tracking cookies (excepted for some technical matters). Nevertheless the law leaves us in the dark about the implementation of this consent.
In practice
The point is you only need to have implied consent from users to use cookies. Most websites explicitly inform users that the site uses cookies and don’t give an option to opt-out. Instead, they direct people to change the settings in their browser or leave the website. Ultimately adding a tailored privacy page on your website is also a good practice.
Some examples
Thomas Cook chooses to put a link in the header menu on its website:
John Lewis chooses a floating element in the header for its website:
BBC chooses a floating element for its mobile website:
But there is a gem for that
As you know, Belighted uses RoR on a daily basis, and the usual way of doing is looking for gems that already solves the problem in order to get you faster with the better solution. We found the ‘cookies_eu’ gem that includes a fully customisable footer with all the css and js needed. Even a sample of a cookie privacy page is included. A perfect bundle to comply with the law.