Uploaded image for project: 'CritiqueBrainz'
  1. CritiqueBrainz
  2. CB-445

CritiqueBrainz includes 3rd-party resources without consent

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • Frontend
    • None

      Notably review pages include a Facebook like button, which BTW is non-functional presumably because it would otherwise be a GDPR violation, and a Twitter button.
      Also Spotify, Soundcloud and Google Fonts are included.

      Neither is the user asked for consent for any of the arguably not required services nor does there seem to be a (direct) link to a privacy policy. The MetaBrainz privacy policy doesn't mention Facebook or Twitter.

          [CB-445] CritiqueBrainz includes 3rd-party resources without consent

          Alastair Porter added a comment -

          Thanks for the reminder of this. We already started looking into google fonts on LB, I'll start that task up again and we can include it here too.

          I remember a js plugin which only enables social sharing buttons (and makes the request) after a user clicks on it, I can't remember what it's called, but I'll have a look for it and we can set it up.

          For spotify we should be able to wrap the player in a similar user-action process. This will be a temporary action as eventually we'll integrate BrainzPlayer into CB, which will have this built-in.

          You're right about the privacy policy too, we should explicitly link to the MeB one at least from the About page (or footer?), and on other sites too if that's not already there.

           

          Alastair Porter added a comment - Thanks for the reminder of this. We already started looking into google fonts on LB, I'll start that task up again and we can include it here too. I remember a js plugin which only enables social sharing buttons (and makes the request) after a user clicks on it, I can't remember what it's called, but I'll have a look for it and we can set it up. For spotify we should be able to wrap the player in a similar user-action process. This will be a temporary action as eventually we'll integrate BrainzPlayer into CB, which will have this built-in. You're right about the privacy policy too, we should explicitly link to the MeB one at least from the About page (or footer?), and on other sites too if that's not already there.  

            Unassigned Unassigned
            chaban chaban
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:

                Version Package