If commenter doesn't check (cookie) consent checkbox, don't use Gravatar.

[lakenh]

I think it would be a safe assumption that if a user doesn't want cookies, they most likely don't want their image or a hash of their email to be publicly facing.

If this is done, I propose we change the string for the checkbox, to specify this in particular.

Related to #44067, #14682

[idea15]

Congratulations on your first ticket @lakenh!

We have a focus on Gravatar in our V2 roadmap and will definitely take a look at this.

[pputzer]

I don't think conflating consent for two separate issues (cookies and Gravatar.com integration) is a good idea. I might want to have those cookies in my browser, but not share my email with the world (i.e. gravatars). It might also run afoul of the "coupling prohibition" in GDPR.

[lakenh]

Replying to pputzer:

I don't think conflating consent for two separate issues (cookies and Gravatar.com integration) is a good idea. I might want to have those cookies in my browser, but not share my email with the world (i.e. gravatars). It might also run afoul of the "coupling prohibition" in GDPR.

Fair point in regards to the conflation issue.

Though, there has been talk of removing the need for cookies entirely in commenting for logged out users. I don't recall what tickets or slack discussions that was in, though.

[SergeyBiryukov]

Replying to lakenh:

Though, there has been talk of removing the need for cookies entirely in commenting for logged out users. I don't recall what tickets or slack discussions that was in, though.

See #43857.

[garrett-eclipse]

Dropping privacy focus as it's already in the Privacy component.