Hi, Just looking into GDPR and thinking about adding a cookie pop up to the site. I appreciate these things are best coming from a legal advisor, but if any one has already gone down this path Im hoping it can save me some time. Do you need a cookie consent pop up for a ghost site? If so anyone …

GDPR is not just about cookies. It is mostly about user personal data processing. Ghost is not compatible with it.

I’m sorry but “Ghost is not compatible with GDPR” is a pretty strong (and quite imprecise) claim, you should definitely elaborate to substantiate it. I agree that GDPR goes beyond just cookies, but 1) the question asked in the topic was about cookies 2) Ghost does not store non-essential cookies a…

Shameless plug: Legal Monster is a pretty advanced cookie solution with cookie policy, privacy policy, real-time consent audit etc. You can just paste their script into ghost. I work with Legal Monster.

[image] simardcasanova: I’m sorry but “Ghost is not compatible with GDPR” is a pretty strong (and quite imprecise) claim Seems like a precise claim to me. It’s black and white, either it’s compatible or not, and he says it’s not. Searching “GDPR” here on the forum will give anyone the insigh…

No, the claim is not precise. At all. Saying “X is not GDPR compliant” requires to prove it. Just saying it does not constitute a proof. Also, I disagree that it’s a yes/no answer. GDPR is made of many different things. You can be compliant on a part of it, and not on another part of it. If the “t…

I wasn’t thinking of mailgun mainly, but that the portal script is served over unpkg.com . Members functionality can be turned off, but basic portal functionality cannot, it’s an integral part of Ghost now. As I understand it this makes Ghost non-compliant. I absolutely disagree with your view that …

I might be mistaken, but from what I understand - it’s a matter of business needs as well. Meaning; if the business is dependent on having a contact form and various form of analytics and if you can justify these various ways of collecting data - you do not need to provide a “on / off”. All you ne…

Are we so sure that unpkg.com do indeed collect IP addresses? And if yes, what are they doing with it? Is it full IP addresses, or just a part of them? Either you’re compliant or not, it’s as simple as that. Literally, no. At least in France this is not how GDPR compliance is assessed by CNIL (b…

Definitely! And if you collect personal data (for instance with a contact form), as long as you get the consent of the user it’s fine. Data hoarders such as Facebook and Google are very likely GDRP compliant – because they ask for consent.

I’m using GA with anonymous IP, a contact form and instead of the “Publish with Ghost”, I turned it into “Facebook Messenger Support”. Not sure I need to get consent for the tracking since its anonymous. @dan any ideas / input on this?

GDPR/Cookies Suggestions

Developer help

dan April 9, 2021, 8:13am 18

You don’t need a cookie consent for a straight Ghost installation.

If you use something like Google Analytics or Facebook pixels that actively track your users with cookies, then you do.

Topic		Replies	Views
Ghost 6 Tinybird and GDPR? Using Ghost	26	462	August 7, 2025
GDPR Query - Ghost Pro Using Ghost	12	436	July 12, 2024
How to make Ghost fully GDPR compliant in Germany? Using Ghost	4	1330	January 23, 2023
What about cookies? Developer help	4	8283	April 7, 2021
Easy GDPR Compliance 2023 Memberships & subscriptions	1	657	November 13, 2023

GDPR/Cookies Suggestions

Related topics