Embedding Scratch-projects in other websites - which cookies are set?

informatikZentrale

Embedding a Scratch-project via iframe in a webpage leads to 9 cookies set by Scratch - see attachment.

I would like to know if these cookies are GDPR-compliant (also CCPA in California, in Germany DSGVO); in other words: Do these cookies store user-data?

Thanks in advance!

(removed by moderator for safety)

Last edited by Paddle2See (Aug. 26, 2020 18:23:12)

Sheep_maker

I don't think the CCPA applies to Scratch since I don't think Scratch is a business

You probably shouldn't post your scratchcsrftoken and scratchsessionid on the forums. They don't contain data submitted by you, but they can be used by others to perform actions using your account

I'm not sure if your preferred language counts as user data

- Sheep_maker This is a kumquat-free signature. :P
This is my signature. It appears below all my posts. Discuss it on my profile, not the forums. Here's how to make your own.
.postsignature { overflow: auto; } .scratchblocks { overflow-x: auto; overflow-y: hidden; }

informatikZentrale

Thanks, Sheep_maker!

The CSRF-token is made to change with every transaction (that's its main purpose), so I am confident posting it will lead to no abuse. But you are totally right, and we have to encourage all users: Be careful with posting such data in public! In doubt just don't post it!

Paddle2See

I suggest you ask the Scratch Team directly.

Please use the Contact Us link http://scratch.mit.edu/contact-us/

Scratch Team Member, kayak and pickleball enthusiast, cat caregiver.

This is my forum signature! On a forum post, it is okay for Scratchers to advertise in their forum signature. The signature is the stuff that shows up below the horizontal line on the post. It will show up on every post I make.
(credit to Za-Chary)

;

LuneeGanchaLinef

Paddle2See wrote:
I suggest you ask the Scratch Team directly.

Please use the Contact Us link http://scratch.mit.edu/contact-us/

but theres no send appeal button

BRUATALLY MURDER THAT KUMQUAT REAL GOOD

ono :: events reporter

delete this kumquat :: control cap

YEAH THAT WAS SO SOUR

-Infinite-Code-

LuneeGanchaLinef wrote:
Paddle2See wrote:
I suggest you ask the Scratch Team directly.

Please use the Contact Us link http://scratch.mit.edu/contact-us/
but theres no send appeal button

You have to press the ‘get help’ button and then follow the instructions.

Discuss Scratch