Any suggestions how to support user privacy like Google Consent Mode v2

Community Cloud
,
1

Hi, I am going to be having cookies and probably Google Analytics. Are there any recommendations on how to support things like:

  • Google Consent Mode v2
  • Cookie Consent
  • Privacy policy
  • Terms and conditions

Maybe something like How to Add Cookie Banner on an HTML Website - CookieYes but we would need a way to inject that into the HTML template.

2

Any suggestions?

Here is what I have come across (I am not a lawyer). Thinking that since we are using / offering data analysis along with tracking, our typical streamlit sites will need:

  • cookie consent - for cookie usage, especially if we use something like Google Analytics
  • privacy policy - for clearly explaining what is happening with the users data (like if they upload files, personal or identifying data). Also to state that I am using AI services located in the US (openai).
  • Terms and Conditions - I will mainly put stuff like data usage… like person will not use personally identifying information, financial data in the queries, data may be collected for AI model training, data may be compiled and used for research, maybe if you plan to resell the data, data ownership… the results of the website are owned by me, not the user. Or both user and me (programmer)… whatever you want. Who to contact for security or copyright content concerns.

These should be done in a easy / consent explicit way so that it is clear that the user is agreeing. They should be globally aware for the user groups / locations you expect users to be located (age, europe GDPR, US data privacy by state… ugh.) I mean you could also do a browserwrap solution where you imply that by using the site the user has understood and agreed to the terms and conditions but if there is no click to go forward then I question if anyone really read them.

I am experimenting with AI too… be sure to also look into safety guardrails and use system prompts to protect from giving dangerous comments.

Check for any remote resources / scripts like fonts, remote css or javascript. move as many as possible to local places.

Anyone else with tips? I have not used any of the new SSO login options so there are probably a whole bunch of concerns around that too.

Some links I found: