this post was submitted on 18 Sep 2023
52 points (96.4% liked)
Explain Like I'm Five
14183 readers
15 users here now
Simplifying Complexity, One Answer at a Time!
Rules
- Be respectful and inclusive.
- No harassment, hate speech, or trolling.
- Engage in constructive discussions.
- Share relevant content.
- Follow guidelines and moderators' instructions.
- Use appropriate language and tone.
- Report violations.
- Foster a continuous learning environment.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
When you login to a website they need to give you a secret password so that when you go to the next page you can tell them that secret again and they will let you access information you have permission for (your Facebook wall for example). That secret is stored in a cookie and every time you go to another page the cookie is sent to Facebook so they know who you are again.
In this instance a cookie is the wrist band you get at a concert so they can easily check that you purchased a ticket. You don't want to have to show your ticket every time you leave and come back into the concert because that's slow, you just flash the wrist band and they let you in.
I know what a cookie is.
I was asking what are legitimate-interest cookies and what makes them different so they don't need explicit consent under GDPR.
They're different because you can't use the service without them. For example like with an auth cookie.
That's a functional (or "strictly necessary") cookie and those are the ones you cannot reject.
Legitimate-interest cookies are a different thing and you can indeed reject them, but they are on by default.