176

As the title says, the cookie settings popup shows up on every page, even after pressing "Accept all cookies".

Any idea why this is happening?

Animated GIF showing the popup re-appear after selecting "Accept all cookies" on reload before and after turning off UBlock Origin. Something for another plugin is shown but it's too small to see. Clicking the "Customize Settings" button does nothing.

45
  • 4
    I've had this a few times throughout the day but it seems to eventually resolve itself...
    – Jon Clements Mod
    Commented Mar 30, 2021 at 22:24
  • 30
    First of all, don't press the first button :) SE doesn't need that much info. Check cookies for stackoverflow.com - do they include OptanonAlertBoxClosed and OptanonConsent?
    – 0Valt
    Commented Mar 30, 2021 at 22:25
  • 2
    Clicking the back button and not refreshing will show the dialog as many times as you want. Refresh the page after clicking back to get the latest code & cookies. Commented Mar 30, 2021 at 22:55
  • 9
    Also this is a bit off topic, but, I have my browser set to "do not track", why is SE asking me whether I want cookies? Didn't I already indicate very clearly that I don't want tracking? Also why is SE using the dark pattern of making it easier to opt in than opt out? I know the answer is probably "Advertiser $$$$", but if I go out of my way to say "no" by setting DNT it should be pretty clear I'm not interested.
    – jrh
    Commented Mar 30, 2021 at 23:12
  • 2
    @jhr DNT setting and GDPR compliance are not the same. DNT is a preference sites can ignore. GDPR legally requires sites with reach to EU citizens to provide a proper consent UI (and a lot of other stuff as well) but does not get in great detail how it should be implemented. Obviously, no profit-driven company is interested in being the "ethical one" unless strictly necessary (read: huge fines for non-compliance). To approve of SE for once, their consent modal is one of the more modest ones in attempts to goat users to accept tracking cookies.
    – 0Valt
    Commented Mar 30, 2021 at 23:22
  • 42
    i.imgur.com/MEG8Qs6.jpg
    – Dharman Mod
    Commented Mar 30, 2021 at 23:30
  • 7
    It's hard to see all the extensions you have installed, but is it possible you're blocking something from cookielaw.org? They're relying on that site for some part of the cookie-check process -- I found I couldn't get the box to go away until I configured NoScript to allow cookielaw.org. Commented Mar 31, 2021 at 7:17
  • 3
    Yeah, that's about as far as I'm planning on taking this. IMO it's not a great design and they could have done better. I'll leave it at that.
    – jrh
    Commented Mar 31, 2021 at 16:05
  • 2
    @jhr, I meant as a whole, not SE specifically - what I mean is they are doing it only because they are forced to, and each try to circumvent what's being imposed on them as hard as they can (reminds me of what tobacco companies try get away with on a technicality). Thankfully, SE has a very vocal community to try out some of the most shady practices, but I agree they are not among the best examples (making "accept all" a primary button is a very disappointing decision from my POV). P.s. dev time - it seems like not too much of it was spent: the cookielaw.org (or, frankly, the company [1/2]
    – 0Valt
    Commented Mar 31, 2021 at 16:15
  • 2
    [2/2] behind it, Cookiepro), sells services for ensuring compliance. Anyways, to avoid distracting the main conversation further - don't get me wrong, I don't disagree with your point of view that things could and should be handled better, just feel that respecting user privacy preferences will never be a willful priority for profit-driven companies. P.s. Signing off on the comment you made above as well.
    – 0Valt
    Commented Mar 31, 2021 at 16:21
  • 5
    When I click "Customize settings", the box doesn't even go away. Commented Apr 1, 2021 at 1:56
  • 2
    @OlegValter cdn.cookielaw.org is blocked by my network and this should be the root of the problem. Commented Apr 2, 2021 at 17:55
  • 2
    @OlegValter I don't get it either. We're getting into "silly" territory at this point, but I am not using a VPN, Chromium is not old Version 89.0.4389.114 (Official Build) snap (64-bit), I don't have a pi-hole or any other "man in the middle" blocker device, I'm running Ubuntu Mate 20.04.1 x86_64 but I remember seeing it on Windows 10 20H2 as well, and the Chromium I ran this test on had zero extensions enabled. Other than ripping apart their frontend JS for clues (I can try, but it's not my specialty) I can't think of anything else to check.
    – jrh
    Commented Apr 2, 2021 at 18:21
  • 4
    It's happening to everyone, but mods simply don't care or say the problem is solved. Don't expect any changes soon. Commented Jun 5, 2021 at 19:08
  • 6
    I use stackoverflow less because this cookie window makes me crazy. Can't remove it whatever I do.
    – Reman
    Commented Apr 24, 2023 at 14:09

6 Answers 6

89

I think they are using third-party cookies to do this (don't do that).

I reported this months ago, and they didn't change anything and didn't even respond.

I have set my browser (Firefox) to block these types of cookies, as it is a privacy violation. I am not going to allow these Stack Exchange cookies, despite any warm fuzzy feelings I may have toward Stack Exchange. So to deal with it, I have added these filters to uBlock Origin:

stackexchange.com##.js-consent-banner
stackoverflow.com##.js-consent-banner
superuser.com##.js-consent-banner

Some people have mentioned Stack Exchange is trying to call JavaScript from cookielaw.org. I do currently allow JavaScript from cookielaw.org, but only when visiting cbsnews.com, as I think it breaks otherwise. I am not going to extend that to Stack Exchange, until we get some kind of response from employees, and maybe not even then. That JavaScript shouldn’t be required to make Stack Exchange usable.

13
  • They seem to be first-party: issued by the same domain that's (in the case of SO, .stackoverflow.com). Also, I have 3P cookies blocked by default for all sites. Besides, afaik it would be a huge problem for Apple devices due to ITP.
    – 0Valt
    Commented Mar 31, 2021 at 3:13
  • 10
    They're certainly using third-party javascript (from cookielaw.org) to set the cookies -- I found I couldn't get the box to go away until I configured noscript to allow cookielaw.org. Commented Mar 31, 2021 at 7:15
  • After accepting to dismiss can I revoke these as I don't want them? Probably a meta question in itself.
    – QHarr
    Commented Mar 31, 2021 at 10:51
  • 2
    @QHarr - you can go to devtools and delete both cookies [or do it via other means] :) Or join tripleee in their quest on Uber Meta for brining these settings to the profile
    – 0Valt
    Commented Mar 31, 2021 at 10:57
  • 1
    @QHarr - NP. Do keep it around, the more fuss around privacy concerns, the better for all of us, I think.
    – 0Valt
    Commented Mar 31, 2021 at 11:00
  • It's very strange, I've set my browser to block all third party cookies and I also didn't allow cookielaw.org in NoScript. When I click on the "Customize settings" button and disable everything, it stops appearing ever again (it's community specific though).
    – Clockwork
    Commented Mar 31, 2021 at 13:32
  • 1
    @Clockwork I, too, have my browser set to block third party cookies and don't allow cookielaw.org. When I click the button, nothing happens (except that a loading icon temporarily blinks into view, sometimes), so I can't disable stuff. Commented Apr 1, 2021 at 1:58
  • @KarlKnechtel Which is what I find strange. I should have the same trouble since I have the same settings. I can't help but wonder why it's working for me.
    – Clockwork
    Commented Apr 1, 2021 at 7:05
  • 3
    Thank you for reporting this is part of a current series of bugs that the team is looking into.
    – Rosie StaffMod
    Commented Apr 6, 2021 at 15:50
  • I use a VPN. Turning it off briefly, reloading the page, and then turning the VPN back on seemed to work.
    – Andy
    Commented Apr 9, 2021 at 9:32
  • Same here. It makes me crazy.
    – Reman
    Commented Apr 24, 2023 at 14:06
  • why don't they try to resolve it?
    – remio
    Commented May 9, 2023 at 13:36
  • Customize settings doesn't work in my browser. Nothing happens
    – Reman
    Commented May 9, 2023 at 13:52
13

In my case, despite having uBlock Origin disabled and allowing scripts from cookielaw.org, I could only solve this problem by opening Stack Overflow in a new browser (Brave), accept the Strictly Necessary cookies and check which cookies had been created after this:

OptanonAlertBoxClosed: 2021-03-31T15:41:36.781Z
OptanonConsent: isIABGlobal=false&datestamp=Wed+Mar+31+2021+16%3A41%3A36+GMT%2B0100+(British+Summer+Time)&version=6.10.0&hosts=&landingPath=NotLandingPage&groups=C0003%3A0%2CC0004%3A0%2CC0002%3A0%2CC0001%3A1

I then recreated these cookies on Firefox and the popup was gone.
While this is far from an optimal solution, it allows me to use Stack Overflow without having to close the cookie popup on every page load.

6
  • How bizarre... Are you sure nothing gets blocked? From the looks of it, the conditions for the modal to work properly seem to be ideal.
    – 0Valt
    Commented Mar 31, 2021 at 16:01
  • 2
    I'm on a strict network environment regarding privacy, but that doesn't seem to affect the way Brave handles SO cookie agreement, so It must be FF related. Commented Mar 31, 2021 at 16:07
  • 5
    Firefox doesn't like it at all. On my phone (running FF with uBlock Origin), the popup shows up on every single page, and the "customize settings" button does nothing. On my computer, it tends to pop up and disappear right after (potentially because of a plugin; debugging that takes aaaaaages). Fortunately doesn't appear when I'm on my own network with pi-hole. Extremely broken though - would've been a lot better if they just stayed away from a third party service on this one. It overall seems like a privacy hell based on how my various blockers treat the site as well. Commented Mar 31, 2021 at 21:32
  • How do I manually create these cookies in FF? Commented Apr 1, 2021 at 1:59
  • @KarlKnechtel Please see this image Commented Apr 1, 2021 at 5:01
  • This is what happens when web sites bog down in third party scripts and cookies. I just use uBlock Origin to hide the popup and I’ll probably let Cookie Auto Delete clean up afterwards.
    – Manngo
    Commented May 1, 2023 at 2:56
13

Had the same issue where the popup would come back after each page refresh on www.stackoverflow.com, regardless of which button I press or what cookies I chose to enable. But once I visited meta.stackoverflow.com and accepted only Functional cookies, the popup was no longer shown anywhere.

So the culprit was that www.stackoverflow.com only sets one cookie: OptanonConsent which stores your preferences of allowed cookies in the following format:

groups=C0001%3A1%2CC0002%3A0%2CC0003%3A1%2CC0004%3A0&landingPath=NotLandingPage&datestamp=Wed+Mar+31+2021+19%3A09%3A03+GMT-0400+(Eastern+Standard+Time)&version=6.10.0&hosts=&isIABGlobal=false&AwaitingReconsent=false&geolocation=%3B

Where

  • C0001 = Strictly Necessary
  • C0002 = Performance Cookies
  • C0003 = Functional Cookies
  • C0004 = Targeting Cookies

Each setting followed by %3A (which is URL encoded column : sign) and a number 0 or 1, where 1 means enabled. So in the example above, only Strictly Necessary and Functional Cookies are enabled.

To prevent the popup from showing again, another cookie must be set: OptanonAlertBoxClosed with any value (even empty), by default it sets with the date cookie preferences were changed, i.e 2021-03-31T23:09:03.572Z

For whatever reason www.stackoverflow.com does not set this cookie.

2
  • Any way to set the cookie manually?
    – BrandonL
    Commented Nov 16, 2021 at 21:20
  • Sure, via developer tools (F12)
    – vanowm
    Commented Nov 16, 2021 at 23:55
10

This happens when you use a blocker to block scripts or XHR from cookielaw.org.

I ran into it, when I had set a default policy of block all third party (except images and css).

4

This was something we had to track down and reproduce. We found that the issue was happening to less than 1% of users who have configured browser settings or ad blocking installed. We’ve since updated the user experience to display an error message with more information when this occurs.

8
  • 1
    Thank you! Can you elaborate in your post on the underlying problem (or link to a relevant MSE post if all the info is there)? I think providing details on the matter will benefit everyone.
    – 0Valt
    Commented Apr 29, 2021 at 14:45
  • 3
    @OlegValter probably third party cookies related. BTW Des, I found this issue on any browser I used.
    – Braiam
    Commented Apr 29, 2021 at 15:35
  • 7
    @Des Hi, you've tagged this question as "status-completed" but nothing changed, meaning the popup is recurring and there's no way dismiss it permanently.. Commented Apr 29, 2021 at 17:07
  • 5
    This is definitely still an issue, it never stopped happening for me. (I don't get it every time I visit a Stack Exchange, but maybe about once a week they all start giving me the popup again.) It seems that more recent questions are being closed as a duplicate of this one, so it seems like it would be a good idea to remove the status-completed tag.
    – N. Virgo
    Commented Oct 30, 2021 at 7:35
  • 5
    I seriously doubt it is 1% of users, I am using Safari with no adblocker and it comes up every time. It is immensely annoying.
    – Guesser
    Commented Oct 18, 2022 at 19:43
  • 3
    It is still happening to me. I have adblock enabled and I don't see any information or error message on clicking "Accept all Cookies" Commented Apr 16, 2023 at 12:48
  • 2
    I'm using stackoverflow since 12 years. The last 2 years I almost didn't use it anymore because of those awful cookies. The cookie window is still there on every page. I have FF Browser and Ublock turned off. With or without ad blocker nothing works. Terrible!!!
    – Reman
    Commented May 9, 2023 at 13:41
  • Added Hush extension to my Safari browser. No more annoying cookie pop-ups. 🍪👍
    – Tom J
    Commented Aug 24, 2023 at 1:42
2

This can be related to Ghostery. Pause Ghostery and answer the popup. When Ghostery is resumed, the problem does not recur.

This is still a SO issue. No other website I've encountered requires this workaround.

8
  • 2
    Ghostery blocks cookies. If you can't store the user's choice, then the popup is going to re-appear. This is not a SO issue, it's a plugin issue. Ghostery needs to whitelist that choice.
    – Cerbrus
    Commented Apr 2, 2023 at 20:33
  • 2
    @Cerbrus it is a deliberate design choice given the omnipresence of adblockers, privacy plugins and browsers rejecting third-party cookies. I have to dismiss the cookie popup every couple of weeks on Brave, and get an error when doing so.
    – CodeCaster
    Commented Apr 2, 2023 at 21:19
  • 2
    @Cerbrus Again, only SO requires this. Commented Apr 2, 2023 at 21:57
  • 1
    @CodeCaster No, It's not a deliberate design choice to not implement workarounds for browser extensions like this. It's working exactly as intended: No cookies are stored, 'cause you've blocked them.
    – Cerbrus
    Commented Apr 3, 2023 at 16:25
  • 1
    @Cerbrus it is a choice to want to store that cookie as third-party cookie (I suppose, I haven't looked into the details). It's not a "workaround", it's a fact of life in 2023. Just like those site that store the "I don't want any non-necessary cookies" cookie for like three days and then ask again. That's a choice.
    – CodeCaster
    Commented Apr 3, 2023 at 16:36
  • 2
    You're nitpicking an implementation that's probably as old as the site itself... If you're gonna use a addon like this, there's gonna be side-effects. Deal with them...
    – Cerbrus
    Commented Apr 3, 2023 at 16:41
  • 3
    @Cerbrus I am not nitpicking nor using addons. The site has been showing the cookie popup every couple of weeks for a couple of months now while showing a generic error it can't save cookies. Rejecting third-party cookies is and has been native browser functionality that site builders have to accommodate for, and if not, that's just plain ignorance or incompetence or annoying users into accepting cookies.
    – CodeCaster
    Commented Apr 3, 2023 at 16:47
  • Thanks @KevinKrumwiede it worked. Commented May 25, 2023 at 15:53

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .