GDPR settings are simply insane

The dialog shown does not comply to the GPDR. Makes it very difficult and time consuming to reject cookies and consent, according to the GPDR it has to have an option to do it quickly. This just a giant dark pattern dialog to make users give up.

For me, everything was disabled once I opened the dialog options. Legitimate interest was still enabled, but that's compliant to the GDPR.
- 'Legitimate interest' consent for ad-tracking, as the settings state is not compliant with GDPR. 'Legitimate interest' consent bare bones and for security and other essential functions only, not ads.
- It's questionable, thechincally yes but most who ever use it try to fit all of the tracking in that too and I think that's not as clear

There should be a big old reject all button.

Not just "should", the GDPR actually requires it. Not giving consent must be an easy option, not this dark pattern clickfest bullshit.
- There is a reject all button. Try for yourself
I didn't have one either, it was just like the image.
- But wouldn't "Confirm my Selection" reject all? It seema as though anything not necessary for proper functioning is diaanled unless you press enable all or manually enable some of them?
That's how it looked for me.

I'm saddened at the amount of uncivilized discourse going on in this thread.

You can actually talk about these bugs and development with the developer on discord, and also submit reports and suggestions on GitHub.

Saying things like "fuck this" and "uninstalling" about a beta that has had at least 2 versions updated today is the same kind of useless discourse I'd expect with failed protests on Reddit.

Here is a more civilized critique of one of the gdpr functions on GitHub. https://github.com/laurencedawson/sync-for-lemmy/issues/200

Perhaps you can make a new issue about a reject all button as well.

Edit- this response is to the commenters here, not op. OP made a well formatted and polite issue on GitHub.

If its uncivilised to uninstall an app because it's bugs are invading your privacy, then I don't want to be civilised. If anything, I'm doing the author a favour by telling them why I'm using their competitors.
- There is a big difference between "WTH is this shit" and "This is a reason for me to use another app".

Why is it called "Revoke consent"? Consent was never asked during setup, so how can it be revoked?

Edit: oh great. It doesn't even save your settings for objecting to "Legitimate interest". Uninstalled.

It's ironic, because the companies who claim to have a legitimate interest in tracking my behaviour are the ones I want to block from tracking me most of all.

This is the most asshole design for those dialogs. If it doesn't have a "Deny all" button, fuck you.

Ads and data collection are too much for me. Sticking with Liftoff for now.

Highly recommend thunder or Connect as well if you aren't satisfied with liftoff. I've used all (I think?) The android apps and those two go back and forth for my favorite. Thunder looks slickest but connect is the most stable and easy to navigate imo.

You can't even revoke consent in the US. I'll be sticking with Thunder instead of Sync for Lemmy.

File a bug for reject all.

Yeah, that is ridiculous and I have already uninstalled.

I guess it's more of a Google's fault, but still, having to spend 10 minutes to Reject all is insane.

I've uninstalled it, sticking with Connect and will also give Thunder a try. Loved Sync for Reddit and paid for it gladly, but as it is, I'm out.

That is illegal by the way. You should have a single button to reject all. You can report it to your data protection authority

They love this.
- Hm, I'm curious how the law interacts with apps in alpha and beta. Like if an app is brand new and still under development, does it have to follow those laws immediately or is there some leeway because of the app being new
It was a bug you whiny fucking idiots. Fucking stupid people on the internet.

I'm fully for supporting ljdawson and this app - the former version of which I've also purchased.

So, I was really surprised when I saw that the gdpr consent form had some of the worst dark patterns with the opt-out "legitimate interest" for each party.

The first time I was so excited to have sync again, that I just confirmed selection. Stupid of me. Second time, I spent minutes opting out of each individual party's "legitimate interest" - after giving consent.

No idea what this means or if ljdawson knew (he's the dev though), but this really soured my experience.

I think I'll still purchase, but this sucks.

Edit: I've since purchased the ad-free version. I want to give ljdawson the benefit of the doubt and maybe also chalk this up to the beta state. I just quite dislike dark patterns.

Since it's GDPR, I wouldn't be surprised if this is a drop-in library or something that uses those dark patterns instead of LJ setting that up himself.

Ads have no place here..!! 👎🏻

Sync was always an ad supported app with ways to remove them.

I'm not sure why anyone would expect that to change.

I get it, the idea of ads on an app accessing an ad-free, and generally anti capitalist network like lemmy is dissonant. But the truth is that I'd rather have ads in apps than have developers not getting paid for their work.

You gotta realize, it is a time intensive thing. If someone is working on a lemmy app in their spare time, that means development is going to be slow as hell. If they're getting enough income to do it full time (or even part time but dedicated), then we have access to a stable, well supported app.

Google has fucked over developers in how they can monetize. They can't do iterative sales the way software used to work, where you'd buy a program and any major new versions were a new purchase. They're limited in how many versions they can have in the play store, so they can't have tiers at various price points.

Google wants their cut, and that's all they really care about. They get the biggest flow from subscriptions and ads. So they try and channel developers into those streams. It's a long standing problem.

Thia is one of those things where you can't hate the player, you gotta hate the game.
- As long as people can remove the trackers and not have their data sold by paying upfront, instead of having to pay AND part with your privacy then I don't think there is any problem with this. Especially because of the FOSS community's general attitude of 'Is it really open-source if the dev doesn't have to do borderline illegal labor in China to survive?' sucks
- People still sell software the traditional way, especially B2B. I don't like your argument because it assumes someone needs to be paid, community efforts benefit the community and there are plenty of people who just want to make use of their technology on their own terms. They can put ads in this that's their choice, but even adfree if tracking is bundled in it can't be said to be ethical. The community excitement does baffle me a bit, respectfully.
You don't want the developer to earn any money?
- Do those that provide this space earn any money??

I'm in the US and don't have the ability to opt-out of these things.

I used Sync for Reddit for many years but the Lemmy version's privacy policy is not what I was hoping to see. I would love a clarification around what privacy improvements a subscription might add...

Settings shortcut: Privacy > Revoke GDPR consent for ads
- Nothing happens when I click it for me, in the US

I've opened an Issue to look into the consent settings for 'Legitimate interest' not saving:

Github issue

Yes took me a good 10 minutes to scroll the whole thing and disable them one by one

The two toggles called "Consent" and "Legitimate interest" is one of the most jarring things I've seen since GDPR came out. Those are legal basis for processing data, they're not supposed to shown like that to the user, that just makes no sense.

User have to opt-in for processing activities that are based on consent, and be allowed to opt-out of processing activities that are based on legitimate interest, but to do that they must know what those processing activities are in the first place!

Edit: The more I think about it the more it makes my head hurt. What does a toggle just called "consent" mean? Am I opting in for "consent"? Why are they just writing "legitimate interest" without telling what is the interest and why it is legitimate? Complete nonsense

Big turn off in my opinion. I might stick to thunder

Back to jerboa for me. Even though people seem to overlook it, it seems to work pretty well, and every single app I try just leads me back to it. I am also getting faster loading thumbnails and images on it than sync. Sync does feel smooth with its high refresh rate, but in my limited time with it, that seems to be the only plus it has over jerboa (edit: for the way I like using it; list or compact mode).

Yep, I'm already back on Connect. Why switch to an app that uses Google to track me?
- I now have a whole folder full of "on-hold until further notice" fediverse apps. I really want to find a use for Mastodon, Pixelfed and Element. I guess I never really used X (lol), and Instagram and Discord I use for very specific things, which currently don't seem to translate for me to the fediverse. Also recently downloaded Quasseldroid because I wanna get back to using irc for some high-seas adventures (though I only briefly used that back in the ICQ days to chat with friends).
Jerboa works well, so does Liftoff & many others... infinity for Lemmy is coming along nicely too...
- big +1 for Thunder. I love Sync so far and paid the one-time no ads option, but I understand why others wouldn't want to.
- Jerboa has gotten a lot better over the past months. Folks who tried it early on and didn't like it might want to give it another go.
Am not overlooking it. It's my go to Lemmy app.

This is bit of a band-aid fix and doesn't fix the real issue, but you should use an adblocking DNS on your phone, like dns.adguard-dns.com . It'll block a lot of those domains from connecting. Of course this still shouldn't exist in the first place and we should absolutely push for no tracking.

I see the revoke button but it does nothing. I'm in Switzerland. Is it a bug?

I don't see this option on my app? Where is this?

I do not see it too, but it may be based on location, only Europeans have GDPR. I'm in Canada so fucked by hundreds of trackers without protection I guess?
- I'm in Europe and don't see it.
  
  Edit: All there is for me is an "revoke all" button
- You can use DuckDuckGo for app tracking protection.

Technical question, what library / ad network is this?