Post #3279640

2026-06-03 18:42 UTC

@noybeu@mastodon.social @finnmyrstad@eupolicy.social @uc@mastodon.scot @marjolica@social.linux.pizza Just causing a users IP to be sent to a third party server without consent has run afoul of courts (the “Google fonts problem”) IF that service does not qualify for a “strictly necessary” exemption under the GDPR e.g: CDN for performance, shopping cart, security… Analytics, ads, martech or related profiling is never exempt 2/2

Replies (2)

@gorsefan@ravenation.club 2026-06-03 18:52

@uc@mastodon.scot @finnmyrstad@eupolicy.social @noybeu@mastodon.social @marjolica@social.linux.pizza (sorry last thing!) Exception to previous point is if the site owner has a robust, GDPR-compliant Data Processing Agreement in place with the third party AND implicit consent is gathered by the site owner e.g. via a Terms Of Use page. Most US companies will not be willing to/do not have a DPA like that in place for EU & UK publishers Sorry for all that, but it is nuanced! 🤐

Open ##3279641
@marjolica@social.linux.pizza 2026-06-03 18:55

@gorsefan@ravenation.club @noybeu@mastodon.social @finnmyrstad@eupolicy.social @uc@mastodon.scot just to clarify. I think with the Guardian if you subscribe then you are paying to support the publication and as a bonus if you pay them enough not see the adverts. I don't know what options they offer as to 'personalisation' of ads (aka tracking). AFAIK this is the same model as the streamers (including ITV and CH4) run, where it's cheaper if you accept adverts. In my case I run ad and tracker blockers and I neither see the adverts or pay to view. If I were to support them (I think I might if they didn't have so much fashy stuff as well as the good) I would still keep my blockers on.

Open ##3279642