Any idea when this is due to be complete?
We’re still in the back-and-forth with our attorneys on the edits to the privacy and cookie policy. We hope to have more news here by the end of this week!
As far as I can tell Webflow is also tracking and using cookies on published sites to see how people are interacting with site built in Webflow.
This should absolutely not be the case. For example, here’s a test page I just published, and it doesn’t contain any cookies or trackers: http://test-site-1974aa.webflow.io/
If you’re adding a Facebook Like widget to your site, or have any custom code that enables Google Analytics or something similar, then that’s an opt-in action depending on each site you create - and Webflow has zero access to or control over that data.
An explicit list of the cookies used and their purpose will also help Webflow built sites prepare for GDPR.
As mentioned above, we’re close to finalizing this. But there are NO cookies added by default in Webflow published sites - only the ones that you choose to add yourself via integrations to your specific sites are added (which Webflow does not control).
There is a session cookie that is used for logging into the Editor (via the ?edit mode), but that only kicks in when someone logs in to edit their site, and is not used for any other purpose than to facilitate login for content editors.