TOPIC:

DeltaTee wrote:

If login is the only feature that is hampered by the cookies, I think it makes more sense to put the link up near the login boxes. Would it be possible to not disable the login boxes, but have them direct to the agreement instead?

Thanks for contributing this idea to the conversation. I am not dead set on the link at the bottom of the screen... I just needed to get something in place quickly. I am totally open to some other way to provide access to the pop-up.

However, doing it from within the log in dialogs is not really a feasible approach. (I know some others have suggested this.)
Reason: Some clubs use Google Analytics and that does not care if you are logged in or not. The cookie acceptance really has to be tied to an IP address and not a member id or login. Trust me, Brian and I have discussed this, and while neither one of us is particularly thrilled to have me implement this, I think we are currently in agreement that tying the acceptance to an IP address is what we must do.

Lets keep beating this up though... The intent is to not implement something overly cumbersome. We just need to meet the intent of the regulations in a way that is justifiable.

Thee agreement is still not accessible. I can't see it. ("You are not authorised to view this resource.")

Our president tried logging in, clicked the link to read the policy, but was just brought to FTH page. She was pretty much forced to select "agree" to terms she hadn't read to access our club page, which she was quite upset about. This should be fixed very soon, this is highly unacceptable!

It was not my intent to try to change the login box code--let me try again to say what I wanted to. What if, assuming that the Login button is normally tied to an action like "doUserLoginLoginScreen", when it was "disabled", it was tied to an action "doCookiePolicy". The "disabled" button isn't really disabled, it is just tied to a different action. If that doesn't work, what if you drew a transparent box over the disabled controls and allowed it to intercept the "doCookiePolicy" clicks?

Either way, I think it makes sense to have a better proximity solution--if people see that the login boxes are greyed out, they are most likely going to have no idea why.

dhkendall wrote:

Thee agreement is still not accessible. I can't see it. ("You are not authorised to view this resource.")

Our president tried logging in, clicked the link to read the policy, but was just brought to FTH page. She was pretty much forced to select "agree" to terms she hadn't read to access our club page, which she was quite upset about. This should be fixed very soon, this is highly unacceptable!

Which link are you using?

The link that is showing up on my club's page is NOT the current link that Steve posted. This link is shown on my club page: support.toastmastersclubs.org/doc/item/1...cy-and-cookie-policy

Try this one: support.toastmastersclubs.org/doc/item/f...cy-and-cookie-policy

It doesn't have the numeric ID in it. I tested it while logged out.

Still not authorized.

Both the pop up and the link at the bottom lead to this.

But as the pop up is what you’ll first see that should be a priority to make sure that link works.

Jane wrote:

Try this one: support.toastmastersclubs.org/doc/item/f...cy-and-cookie-policy

It doesn't have the numeric ID in it. I tested it while logged out.

404 for me.

I am also unable to view the link and get the same message ("You are not authorised to view this resource.")

- Pat

SteveTheTechie wrote:

Jane wrote:

Try this one: support.toastmastersclubs.org/doc/item/f...cy-and-cookie-policy

It doesn't have the numeric ID in it. I tested it while logged out.

404 for me.

Try it now (logged out).

Ok, I think the link is accessible and working now.

Thanks Jane for the assist!

I noticed in the FreeToastHost Privacy and Cookie Policy, under section 1.5 Your Device and Location the following quote: "When you visit or leave our websites, we receive the URL of the site you came from . . ." I am not comfortable with this, and there does not seem to be a logistical reason that users should consent to this to be able to conduct club business.

I can understand giving users the option if they wanted to allow this, and perhaps receive product information based on their browsing in another setting, like visiting the website of a profit-based business. But, why is Toastmasters requiring that I consent to this just for me to be able to log in to my Toastmasters website to create and edit agendas for example? Can you remove this requirement? Or, can you offer further feedback or suggestions? Thanks.

Every site on the internet gets that information from you everytime you visit the site. They get Your IP address and a bunch of other information such has how you got to the site and what link you clicked to leave. It is not something you can choose not to give.

It is like driving your car your license is recorded by traffic cameras, toll booths, parking lots, police, they all collect information on where you have been and where you are headed.

The GDPR is just making it so everyone gets informed about what happens.