I've just had a report on my XF2 site from a company that deals with GDPR compliance with regards to cookies.
Out of the box XF2 is not GDPR compliant in terms of Cookies - even the cookie notice is not sufficient: here's the gist of the report I received, I've also emailed them to see if they are interested in developing plugins for the major forum softwares including, of course, Xenforo:
This makes for interesting reading - if you want to check you own sites go to:
https://www.cookiebot.com/en/
Cookie scan report
Summary
Scan date: 06/04/2018
Domain name: thegreatspirit.co.uk
Server location: Germany
Cookies, in total: 3
Scan result
3 cookies was identified.
3 cookies are unclassified and needs manual classification and a purpose description.
Category: Unclassified (3)
Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.
COOKIE NAME PROVIDER TYPE EXPIRY
xf___crossTab thegreatspirit.co.uk HTML Persistent
First found URL:
https://thegreatspirit.co.uk/
Cookie purpose description: Unclassified
Initiator: Script tag, page source line number 1402
Source:
https://thegreatspirit.co.uk/js/xf/core-compiled.js?_v=03123130
Data is sent to: Germany (adequate)
Prior consent enabled: No
xf_csrf thegreatspirit.co.uk HTTP Session
First found URL:
https://thegreatspirit.co.uk/
Cookie purpose description: Unclassified
Initiator: Webserver
Source: thegreatspirit.co.uk
Data is sent to: Germany (adequate)
Prior consent enabled: No
xf_session thegreatspirit.co.uk HTTP Session
First found URL:
https://thegreatspirit.co.uk/
Cookie purpose description: Unclassified
Initiator: Webserver
Source: thegreatspirit.co.uk
Data is sent to: Germany (adequate)
Prior consent enabled: No
©2018 Cybot
Cookie scan report - 1/1
Anyone from XF like to comment please?
