XF 2.2 Will xenForo cookie consent notice be on Google's list of certified CMPs?

[Mr Lucky]

Not content with recently making us jump through hoops editing the default xenForo consent notice, we now have this:

Google’s commitment to transparency and control means we regularly look at ways to improve the consent experience. When we do this, we’re thinking about evolving user expectations and regulatory indicators that we think will ultimately guide the broader online advertising landscape.​

​

We recently announced in this blogpost that later this year, we will require partners using our publisher products — Google AdSense, Ad Manager, or AdMob — to use a Google-certified CMP that integrates with IAB Europe’s Transparency and Consent Framework (TCF) when serving ads to users in the European Economic Area or the UK. In the coming weeks, we will make available a list of certified CMPs that have integrated with the TCF and can demonstrate they meet the TCF’s specifications, and we’ll require that our publisher partners use a CMP from that list. This new requirement will apply to partners’ own accounts and those managed by partners on behalf of others. The list of Google certified CMPs will be available in our HC articles (Ad Manager, AdMob, AdSense).​

I wonder if xenForo will be on the approved list, or whether we need to integrate a 3rd party "approved" CMP even though the xenForo team have done a great job in furnishing us with a GDPR compliant consent notice, but now Google has changed the goalposts yet again.

I'm sure that unless we use one of their approved CMPs then we will not be able to use adsense. And I'm also sure that integrating one of those is not going to be as easy and seamless as the provided xenForo consent notice. Grrrr.

Will xenForo be compliant?

 

[Mr Lucky]

Really? But how can one remove that button from the Google GPDR notice?

 

[Black Tiger]

Thanks.

Ah wait.. I have that one off and then they get Consent or Options, no close indeed, but only the "justified consent" is enabled by default. I presume there is no way to set the normal options enabled by default?

 

[Mr Lucky]

but only the "justified consent" is enabled by default.

I don't see that

 

[Black Tiger]

This is in Dutch but it shows what I mean.



This is how it looks on my forums.

 

[Mr Lucky]

Is that legitimate interest?

You can set the default in the main overall GDPR settings that applies to all sites. (Not the settings for each site)

It is confusing, but then that's Google for you.

 

[Black Tiger]

Is that legitimate interest?

Ah yes that's it... I didn't know the correct English term.
As far as I know I used the manage option, but probably I'm using some wrong option there.

 

[Black Tiger]

It is confusing, but then that's Google for you.

Doublechecked, seems I've done everything correct, personalised ads active.
I didn't had all purposes selected so I set them all now to active, don't know if that is good.

You got 2 active, what is the second one?

Still nothing goes active by default except for the legitimate interest. If you or anybody else can point me to the correct setting (if possible/present) to have the normal options set to be allowed by default (like legitimate interest) that would be great.

 

[Mr Lucky]

You got 2 active, what is the second one?

I actually have three active. 2 on Adsense and 1 on Admanager (don't ask?). The other active one on Adsense is Wordpress site tamingthesaxophone.com

The active one on Admanager is very small forum https://logic-users-group.com/

However the message isn't actually showing there, no idea why.

 

[Kirby]

Still nothing goes active by default except for the legitimate interest.

That's how it should be - consent can never be enabled by default and legitimate Interest doesn't matter for ads, it's not being used any longer as of TCFv2.2

Understanding the Transparency & Consent Framework v2.2 - IAB Europe

Dated: 24 June 2023 Important Note: The Implementation deadline of TCF v2.have been moved from September 30th 2023 to November 20th 2023. More information here In order to respond to the changes and needs of the market, while continuing to help players in the online ecosystem comply with certain...

iabeurope.eu

The current version of the TCF Policies allows the use of legitimate interest or consent to carry out data processing operations for Purposes 3 (Create a personalised ads profile), 4 (Select personalised ads), 5 (Create a personalised content profile) and 6 (Select personalised content). The TCF Policies will be amended to remove “legitimate interest” as an acceptable legal basis for these Purposes. As a consequence, within the scope of the TCF, Vendors will only be able to select consent as an acceptable legal basis for these Purposes at registration level.

 

[Black Tiger]

That's how it should be - consent can never be enabled by default

Oh then I don't know how they've done it, but I have seen this enabled by default by some sites. So you just have to deselect what you don't want to be used. Maybe it's something similar then but it looked (layout wise) the same as the one from Google.

Anyway, if it's not supposed to be enabled by default then it's fine by me.
I thought it was possible to enable by default, so users could switch it off themselves if needed. Thank you!

 

[Kirby]

I thought it was possible to enable by default, so users could switch it off themselves if needed.

Might be possible with different legislation (CCPA for example), but definitly not with GDPR/TCF.

 

[Mr Lucky]

I've more or less come to the conclusion I will disable the Google CMP and just use the xenForo one, I'd rather swallow the income from EU ads than annoy users/visitors.

 

[Black Tiger]

I'd rather swallow the income from EU ads than annoy users.

It's not really annoying for them. Just like the Xenforo one they can just accept it once and then be done with it. It will just ad a single line on the bottom of the forum if they want to change their choices at any time.

 

[Mr Lucky]

It will just ad a single line on the bottom of the forum if they want to change their choices at any time.

Except it will be two, the xenForo one and the Google one (which is not a replacement for the xenForto one

see:

Yes, you technically still need the existing cookie if you do not setup the "Add purposes for your own use" option:

And as I have no idea how to set that up (and there is no help anywhere I can fins) , then I will need two.
.

 

[Black Tiger]

Except it will be two

Two cookies, only 1 little banner. I can't see anywhere a cookie change banner for xenforo on my site.

As for the "add purposes for your own use" that is an option you will see when creating the Google adsense thing. If I'm correct it's under the button of the lowest options. I just enabled all to be sure.

 

[Mr Lucky]

Two cookies,

A lot more than two. Some essential, others not. Here is selection



The Google add purposes for your own use just seems to list stuff to do with advertising, nowhere to mention what the xenForo Cookies ore what they are called so it doesn't seem to me that it can incorporate the xenForo cookies or their descriptions.

 

[Black Tiger]

I use the xenforo settings by default and then on the lower screenshot I selected all in the middle column so I'm done with it.
Don't know if that's a good thing, probably it can be optimized, but this way users only have to click once (at registration) for the Xenforo section and once for the adsense thing and that's it.
Users won't be bothered with anything after that.

But that's how I did it, everybody has it's own choice ofcourse.

 

[Mr Lucky]

but this way users only have to click once (at registration) for the Xenforo

Yes but it's not so much registered users but guests I am concerned about. Sorry I didn't make that clear above I was using "users" in the same sense as Google, ie all visitors to the site have edited above to include visitors.

In my case registered users won't see the Google one as they don't get ads.

 

[Black Tiger]

Guests have to click both once also as long as they keep the Google and Xenforo cookie(s).
Also a lot of guest most likely will use ad-blockers so they might only see the Xenforo button to accept. At least uBlock is blocking the one from Google.

So it depends on the visitors themselves imho.
But it's you're choice ofcourse.