Cookies: what’s changing on October 2nd?
We’re making some changes to our cookies on October 2nd, 2023, and you might need to update your site’s cookie banner before that date.
Who do these changes apply to?
Before you read any further, check whether the changes laid out in this article actually apply to your organization.
The changes we’re making apply to:
- organizations that have a cookie consent banner on their website,
- organizations who accept donations from any European Union country or the United Kingdom.
If your organization doesn’t fall into either of the above two categories, there’s nothing you or your organization needs to do.
What are cookies? Why are they changing?
Cookies are small files that are stored on your device when you visit a website. They help with things like remembering your login information, analyzing website traffic, and personalizing content to enhance the overall user experience. They can also raise privacy concerns, so it's essential to manage them through your web browser settings.
Fundraise Up also puts cookies onto your site visitors’ devices to improve security, prevent fraud and improve their site experience. On October 2nd, we’re making a few small changes to the cookies we use. These changes will also improve your organization’s compliance with the UK and EU’s shared GDPR regulations.
What you need to do: a step-by-step guide
If your organization has a cookie banner or has donors in the UK/EU, you need to complete the following steps by October 2nd.
- The first step is to understand the changes we’re making. The changes are as follows:
fundraiseup_func
: this is a new cookie that will be added to the Functional cookie category, to go alongside the pre-existingfundraiseup_session
cookie.fundraiseup_stat
: this cookie is also new, and will go into the Performance (Statistics) cookie category.fundraiseup_cid
: this pre-existing cookie will stay as it is, in the Strictly necessary category, as it’s needed for fraud detection and prevention.
- Then, apply the above information about new cookie files to your site’s cookie banner without removing
fundraiseup_session
from “Strictly necessary cookies”.
fundraiseup_session
from the "Strictly necessary" category in the cookie banner, the banner may delete this cookie when existing supporters visit the site. As a result, we will not have sufficient time to migrate the data to new cookies. Your organization will be able to delete this cookie in around six months, once the transfer is complete. We recommend that you configure the order of loading and executing scripts on your organization’s website in such a way that the cookie banner service code is loaded and initialized on the website before Fundraise Up's code. This will help prevent a situation where Fundraise Up sets its cookie files on the device of a user who then chooses to block some of those cookies through your cookie banner.
Cookie categories
This is an overview of all the 3 cookie categories as they will be from October 2nd, with the above updates taken into account.
Strictly necessary
Fundraiseup_cid
is a cookie set by Fundraise Up, and is used to identify a user’s browser. This cookie is necessary for the platform to function properly and securely, as it helps us detect and prevent fraud.
Category | Strictly necessary |
Expires after | 10 years |
Type | First-party cookie |
Functional
Fundraiseup_func
is a functional cookie required to ensure that the Fundraise Up service works properly on your site. This cookie collects and stores data that allows our platform to provide a better and more personalized donation experience for visitors. The information stored in this file helps us optimize a visitor's interaction with various elements on site, adjusting to their needs and preferences. This ensures that the Fundraise Up service works more effectively, helping to increase engagement and improve the giving experience for your visitors.
Category | Functional cookies |
Expires after | Session |
Type | First-party cookie |
As mentioned above, Fundraiseup_session
must also remain in this category for now, until we have migrated all data from this cookie over to the new Fundraiseup_func
cookie.
Performance
Fundraiseup_stat
: this cookie is used to determine whether the user has given us permission to track their actions. If permission is granted, we will collect and analyze anonymous statistics about how visitors use the site. This data helps us optimize site functionality and provide a higher quality user experience.
Category | Performance cookies |
Expires after | Session |
Type | First-party cookie |
Reasons to update
Making the necessary changes to your cookie banner will help you avoid the following potential difficulties:
- Possible breach of legislation — in many countries, especially in the European Union, there are laws and regulations that oblige websites to inform visitors what cookies are used on the site and why. Failure to include information about cookies from Fundraise Up in your Cookie banner may violate legal requirements.
- Technical issues — if the cookie banner is set to delete or block cookies that the user has not been informed of or consented to, this may result in the deletion or blocking of cookies from Fundraise Up. This may affect the correct functioning of the service on your website.
- Damage to user experience — if cookies from Fundraise Up are deleted or blocked, the functionality they support may not be available to the user. This can cause confusion or even frustration for visitors to your website, as some functions may not work correctly.
To avoid these problems, we strongly recommend you make sure that your cookie banner correctly informs users about all cookies used and obtains their consent before setting them.
FAQs
1. What is the exact data that each Fundraise Up cookie collects and stores?
Our fundraiseup_cid
cookie only stores a unique user identifier that we use for fraud prevention, tracking, and our AI features. The fundraiseup_func
(previously fundraiseup_session
) cookie contains data about the user’s interactions with our elements. The fundraiseup_stat
cookie indicates whether or not the user has given permission for their to be tracked.
2. What happens if a user decides to block one or all of these cookies?
Blocking these cookies can impact certain functionalities. For instance, users blocking the fundraiseup_cid
might affect proper functioning of our platform and anti-fraud measures, which is why this cookie needs to be added under ‘strictly necessary’ in the cookie banner. Users who choose to block the fundraiseup_func
cookie could find it affects their experience of the site, as their preferences and previous interactions will not be remembered thereafter.
3. How can site visitors manage their cookie preferences for Fundraise Up cookies?
Your visitors can manage their cookie preferences through the cookie banner provided by the customer’s websites. Users can choose which categories of cookies they’d like to accept or decline.
4. Are there any third-party cookies used by Fundraise Up?
No, we do not deploy third-party cookies.
5. Will there be any noticeable changes in the user experience due to these cookie modifications?
Users won’t notice significant changes. These modifications aim to enhance transparency and compliance without negatively impacting user experience.
6. What is the exact process of data migration from the fundraiseup_session
cookie to the new cookies?
For returning site visitors who have previously visited your organization’s website, we’ll search for the fundraiseup_session
cookie on their devices. When these supporters visit your website again, we’ll transfer data related to visitors’ interactions with your site from the fundraiseup_session
to the newfundraiseup_func
cookies. After the transfer is complete, we will delete the old fundraiseup_session
cookie ourselves.
7. Is it necessary to set up a cookie banner for Campaign Pages?
The changes outline in this article only affect the Checkout modal on your site. We will be adding a cookie banner to Campaign Pages in the near future.
8. I’ve never had a cookie banner. How do I set one up?
- By using a simple plugin or widget
This is the easiest and fastest way to add a cookie banner to a website. There are many plugins and widgets that allow you to easily create a banner with customizable design and text. Some examples are Onetrust, CookieYes, Cookiebot and GDPR Cookie Consent.
- By creating a customized a cookie banner in your CMS
Some CMSs (content management systems), such as Joomla and Drupal, have built-in cookie banner support. If your CMS has this feature, you can simply customize your banner in the CMS settings.
- By creating a banner yourself with the help of a web developer
If you want to create a banner yourself with the help of a web developer, you can use HTML, CSS and JavaScript. Use the above “Cookie types” section to fill out your cookie banner.
9. What happens if I don’t update my site’s cookie banner to reflect these changes?
The primary reason to update your site’s cookie banner is to ensure that users receive accurate information about the cookies in use, boosting transparency and compliance. Secondly, not updating the cookies might slightly affect your website’s users’s interactions with our platform. This can potentially lead to suboptimal donation experiences or even missed conversion opportunities.
10. What happens if we don’t show a cookie banner at all? Will our site be blocked in Europe?
If your organization’s website accepts donations from European citizens, it’s essential that you ensure compliance with the European General Data Protection Regulation (GDPR) by displaying a cookie banner. Your page won’t be blocked if you don’t have a cookie banner, but it can result in fines and penalties if a regulatory authority determines you’re not in compliance with European regulations.
11. We’re an American organization, but we get donations from Europe/the UK. What should we do?
Because you’re accepting donations from European donors, you still need to comply with GDPR by implementing a clear cookie banner that informs users about what types of cookies are used and why, and obtain their consent before collecting any data. This is a crucial step in ensuring GDPR compliance and avoiding potential fines and/or penalties from regulatory authorities in Europe.