Overview

Cookie consent messages, also known as privacy warnings, are privacy requirements mandated by various international government and state agencies such as the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA). These messages allow companies to notify their users about how cookies are collected and used throughout their website. For citizens in the European Union and European Economic Area, companies must receive, document, and store a user’s consent before setting any cookies that are not strictly necessary cookies. 

As a Folloze Admin, cookie messaging can be managed on Folloze boards at an organizational level by connecting Folloze Boards with CookiePro by OneTrust (referred to as OneTrust), a third-party cookie management solution.

Goals

• Understand the cookies used on Folloze Boards.
• Configure the OneTrust application to support Folloze Boards.
• Configure Folloze to support external cookie managers.
• Install the OneTrust cookie consent manager into the Folloze instance.

Cookies Used on Folloze Boards

The Folloze application makes use of various cookies to improve the visitor experience and to track visitors to Folloze Boards. While the majority of cookies used by Folloze are essential, the lead tracking cookies are not strictly necessary and require a visitor’s consent. For details and descriptions on the Folloze cookies, please refer to the Folloze Live Board Cookies documentation.

Configuring OneTrust

1. Login to OneTrust and navigate to the Cookie Consent application.
2. Navigate to the Websites page in the left hand menu:
   1. If you are using a private domain (e.g., boards.company.com) and there is an existing website configured, ensure that it is configured to support subdomains (e.g., company.com instead of www.company.com).
      Note: If the OneTrust website is configured for www.company.com or subdomain.company.com, the configuration will not work on the Folloze boards with the domain boards.company.com. OneTrust support may be able to assist you with updating your Website configuration to support subdomains on your primary domain.
   2. If you are using a private domain (e.g., boards.company.com) and there is not an existing website configured, add a new Website configuration for your primary domain (e.g., company.com) or Folloze subdomain (e.g., boards.folloze.com). 
   3. If you are using a Folloze-provided domain (e.g., company.folloze.com), add a new Website configuration that is configured for your Folloze-provided domain (e.g., company.folloze.com).
      Note: Do not configure the website to point to folloze.com. Doing so will cause the OneTrust application to scan other subdomains unrelated to your boards. This could result in incorrect cookies being placed into your cookie consent messaging.
3. Navigate to the Categorizations > Categories page.
4. Determine how the Folloze lead tracking cookies should be categorized. Create a new category if necessary or use an existing category. Note the ID for that category.
   Note: Customers typically categorize Folloze lead tracking cookies as functional cookies. For details and descriptions on the Folloze cookies, refer to the Folloze Live Board Cookies documentation.
5. Navigate to the Categorizations > Cookies page. 
6. Click Add Cookie to create the Folloze cookies. 
7. Create the cookies detailed in Folloze Live Board Cookies.
   See example in image below.
   1. Set the Cookie Name field to the provided value in the Cookie Name column.
   2. Set the Host field to the domain of your site (i.e., company.com if using a private domain or folloze.com if using a Folloze-provided domain).
   3. Set the Lifespan field to either Session or Persistent if Session or a length of time is defined, respectively. If set to Persistent, set the Duration field to the defined length of time. 
   4. For non-essential cookies, set the Default Category field to the category selected in Step 4.
      For essential cookies, set the Default Category field to Strictly Necessary Cookies.
   5. Set the Default Description to the provided value in the Purpose column. Easy Copy-Paste.

8. Once all cookies have been created, publish the script and copy the Production CDN Script.
   

Adding the OneTrust Script to Folloze

1. Login to Folloze and navigate to the Company Admin > Custom Scripts section. 
2. In the secondary menu, click on the "BuyEx 3.0 Custom scripts" tab.
3. Click "Add Script".
   1. Give the custom script a name such as "OneTrust Cookie Consent".
   2. For testing, fill in the "Board ID" field with the ID of a board you will be testing the OneTrust script on. For production deployment, fill in the "Organization ID" field with the ID of your organization which will deploy the OneTrust script to all boards.
      Tip: If you don't know your organization ID, enter 1 in the field and click Save. Your organization ID will be displayed below the field.
   3. Click the "Position" dropdown and select "head_top".
   4. In the "Script" field, paste the script copied from Step 8 above.
   5. Copy the following code and paste it below your script. This ensures that the OneTrust cookie banner font styling matches with your Folloze board.

6. Use the OneTrust JavaScript Type Rewriting method to drop the Folloze cookie when the appropriate consent is given. In the code below, replace <category_id> with the ID from Step 4. Paste the updated code into your custom script.

 

4. Navigate to Company Admin > Boards and set the "Enable cookie consent messaging for new boards" drop down to "External". Toggle on the "Enable external cookie consent messaging for existing boards". Finally, toggle on the feature using the toggle on the right.
5. Navigate to a Folloze board to test and ensure the cookie consent banner is displaying. Accept the relevant cookie categories and check the network console to ensure the "folloze_lead" cookie is dropped.