develwoutacause’s avatardevelwoutacause’s Twitter Archive—№ 915

    1. Am I right in understanding that #GDPR treats IP addresses as personal information? If so, doesn't that mean that websites cannot make a single third-party network request without showing a consent prompt? baekdal.com/strategy/publishers-havent-realized-just-how-big-a-deal-gdpr-is/
  1. …in reply to @develwoutacause
    I don't track users, and I don't want to force an annoying popup in their face. But I also can't embed a tweet without leaking the user's IP to Twitter, so how is this feasible from a technical perspective?
    1. …in reply to @develwoutacause
      "Best" options I see are: 1. Don't show a tweet (bad #UX, rejects functional req). 2. Screenshot the tweet (bad for #a11y). 3. Ask for consent (bad #UX, bad #perf, and misleading because I don't track you). 4. Build my own 1P tweet component (#a11y is hard, maintenance, etc).
      1. …in reply to @develwoutacause
        "This is why we can't have nice things." I feel like I'm being punished for trying to respect user #privacy, #perf, and #a11y because of a few bad actors. (And yes I recognize the irony of my profile picture combined with that statement.)