RubyGems - consently - Versions diffs - 0.1.0 - Mend

consently 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (51) hide show

checksums.yaml +7 -0
data/CHANGELOG.md +23 -0
data/MIT-LICENSE +20 -0
data/README.md +279 -0
data/Rakefile +6 -0
data/app/assets/stylesheets/consently.css +252 -0
data/app/controllers/consently/application_controller.rb +4 -0
data/app/controllers/consently/consents_controller.rb +44 -0
data/app/helpers/consently/application_helper.rb +4 -0
data/app/helpers/consently/tags_helper.rb +176 -0
data/app/javascript/consently/banner_controller.js +190 -0
data/app/models/consently/application_record.rb +5 -0
data/app/models/consently/consent_record.rb +18 -0
data/app/views/consently/_banner.html.erb +93 -0
data/app/views/consently/_policy.html.erb +85 -0
data/config/importmap.rb +3 -0
data/config/locales/cs.yml +33 -0
data/config/locales/de.yml +33 -0
data/config/locales/en.yml +33 -0
data/config/locales/es.yml +33 -0
data/config/locales/fr.yml +33 -0
data/config/locales/hu.yml +33 -0
data/config/locales/it.yml +33 -0
data/config/locales/nl.yml +33 -0
data/config/locales/pl.yml +33 -0
data/config/locales/sk.yml +33 -0
data/config/routes.rb +5 -0
data/lib/consently/configuration.rb +150 -0
data/lib/consently/consent.rb +62 -0
data/lib/consently/cookie.rb +12 -0
data/lib/consently/engine.rb +33 -0
data/lib/consently/providers/base.rb +95 -0
data/lib/consently/providers/clarity.rb +34 -0
data/lib/consently/providers/custom.rb +34 -0
data/lib/consently/providers/google_ads.rb +32 -0
data/lib/consently/providers/google_analytics.rb +45 -0
data/lib/consently/providers/google_tag_manager.rb +34 -0
data/lib/consently/providers/hotjar.rb +39 -0
data/lib/consently/providers/meta_pixel.rb +37 -0
data/lib/consently/providers/plausible.rb +30 -0
data/lib/consently/providers.rb +9 -0
data/lib/consently/script.rb +17 -0
data/lib/consently/version.rb +3 -0
data/lib/consently.rb +74 -0
data/lib/generators/consently/consent_log/consent_log_generator.rb +28 -0
data/lib/generators/consently/consent_log/templates/create_consently_consent_records.rb +19 -0
data/lib/generators/consently/install/install_generator.rb +44 -0
data/lib/generators/consently/install/templates/consently.rb +63 -0
data/lib/generators/consently/views/views_generator.rb +15 -0
data/lib/tasks/consently_tasks.rake +4 -0
metadata +121 -0

data/app/helpers/consently/tags_helper.rb ADDED Viewed

@@ -0,0 +1,176 @@
+module Consently
+  # The three helpers a host application calls: the tags in <head>, the
+  # noscript fallbacks right after <body>, and the banner anywhere on the page.
+  module TagsHelper
+    # Every tag configured for this request. Tags whose category the visitor
+    # has not agreed to are rendered inert (type="text/plain") and the banner
+    # turns them into real scripts the moment consent is given - so a visitor
+    # who accepts does not have to reload to be counted.
+    def consently_tags
+      return "".html_safe unless consently_enabled?
+      parts = []
+      parts << consently_stylesheet_tag if Consently.config.stylesheet
+      parts << consently_consent_mode_tag if Consently.config.google_consent_mode
+      Consently.tags_for(request).each do |provider|
+        granted = consently_consent.granted?(provider.category)
+        provider.scripts.each { |script| parts << consently_script_tag(script, provider, granted) }
+      end
+      safe_join(parts, "\n")
+    end
+    # Goes directly after <body> - Google Tag Manager and Meta both still ship
+    # a noscript fallback. Only rendered for categories already granted: there
+    # is no way to hold an iframe back and release it later.
+    def consently_noscript_tags
+      return "".html_safe unless consently_enabled?
+      fallbacks = Consently.tags_for(request).filter_map do |provider|
+        next unless consently_consent.granted?(provider.category)
+        provider.noscript&.html_safe
+      end
+      return "".html_safe if fallbacks.empty?
+      content_tag(:noscript, safe_join(fallbacks, "\n"))
+    end
+    # The banner, the preferences panel, and the JavaScript that releases the
+    # blocked tags. Render it once per page, ideally at the end of the body.
+    #
+    # The container stays in the DOM after a choice is made so that
+    # `consently_preferences_link` has something to reopen.
+    def consently_banner(policy_url: nil)
+      return "".html_safe unless consently_enabled? && Consently.consent_required?(request)
+      render "consently/banner",
+        consent: consently_consent,
+        policy_url: policy_url || consently_policy_url,
+        categories: Consently.config.optional_categories
+    end
+    # A "Cookie settings" link for the footer. Reopens the panel.
+    #
+    # Marked rather than wired: the link lives outside the banner element, so
+    # a data-action on it would never bind. The controller watches the whole
+    # document for a click on anything carrying this attribute, which also
+    # means your own markup can reopen the panel just by wearing it.
+    def consently_preferences_link(name = nil, **options, &block)
+      name ||= t("consently.preferences_link")
+      options[:data] = { consently_open: true }.merge(options[:data] || {})
+      link_to(name, "#consently", options, &block)
+    end
+    def consently_consent
+      @consently_consent ||= if Consently.consent_required?(request)
+        Consent.from_cookie(cookies[Consently.config.cookie_name], version: Consently.config.consent_version)
+      else
+        # Nobody to ask, so nothing is held back.
+        Consent.new(categories: Consently.config.categories, version: Consently.config.consent_version)
+      end
+    end
+    # Push an event onto the dataLayer from a view, respecting consent: with
+    # no analytics consent the event is simply not emitted.
+    #
+    #   <%= consently_data_layer_push("purchase", value: 120, currency: "EUR") %>
+    def consently_data_layer_push(event, category: :analytics, **payload)
+      return "".html_safe unless consently_enabled? && consently_consent.granted?(category)
+      payload = payload.merge(event: event)
+      consently_inline_script "window.dataLayer = window.dataLayer || []; window.dataLayer.push(#{payload.to_json});"
+    end
+    # A complete cookie policy for the tags this request would load: every
+    # category, every vendor, every cookie it sets and for how long, plus
+    # whether the visitor has agreed to it right now.
+    #
+    # Drop it into your own policy page under your own heading and legal text.
+    def consently_policy
+      render "consently/policy", tags: Consently.tags_for(request), consent: consently_consent
+    end
+    # The banner brings its own plain CSS - no framework, no build step. The
+    # look is driven by custom properties, so overriding a few variables is
+    # usually enough; `rails g consently:views` is there for the rest.
+    def consently_stylesheet_tag
+      stylesheet_link_tag "consently", media: "all"
+    end
+    # Where the banner POSTs the decision, when consent logging is on and the
+    # engine is mounted. Nil otherwise, and the banner skips the request.
+    def consently_log_url
+      return nil unless Consently.config.log_consents
+      consently.consents_path
+    rescue NoMethodError, NameError
+      nil
+    end
+    private
+    def consently_enabled?
+      Consently.enabled?(request)
+    end
+    # Google's consent mode v2 defaults. This one is never blocked: its whole
+    # job is to tell Google's tags that they may not store anything yet, and
+    # it has to be on the page before them.
+    def consently_consent_mode_tag
+      analytics = consently_consent.granted?(:analytics) ? "granted" : "denied"
+      marketing = consently_consent.granted?(:marketing) ? "granted" : "denied"
+      consently_inline_script <<~JS
+        window.dataLayer = window.dataLayer || [];
+        function gtag(){dataLayer.push(arguments);}
+        gtag('consent', 'default', {
+          'ad_storage': 'denied',
+          'ad_user_data': 'denied',
+          'ad_personalization': 'denied',
+          'analytics_storage': 'denied',
+          'functionality_storage': 'granted',
+          'security_storage': 'granted',
+          'wait_for_update': 500
+        });
+        #{"gtag('consent', 'update', { 'analytics_storage': '#{analytics}', 'ad_storage': '#{marketing}', 'ad_user_data': '#{marketing}', 'ad_personalization': '#{marketing}' });" if consently_consent.given?}
+      JS
+    end
+    # A plain <script> with the JS as written. javascript_tag would wrap it in
+    # a CDATA comment nobody has needed since XHTML.
+    def consently_inline_script(javascript)
+      attributes = {}
+      attributes[:nonce] = content_security_policy_nonce if content_security_policy_nonce.present?
+      content_tag(:script, javascript.html_safe, attributes)
+    end
+    def consently_policy_url
+      url = Consently.config.policy_url
+      url.respond_to?(:call) ? url.call(self) : url
+    end
+    def consently_script_tag(script, provider, granted)
+      attributes = { data: { "consently-category" => provider.category }.merge(script.data_attributes) }
+      attributes[:nonce] = content_security_policy_nonce if content_security_policy_nonce.present?
+      if granted
+        attributes[:src] = script.src if script.external?
+        attributes[:async] = true if script.async
+        attributes[:defer] = true if script.defer
+        content_tag(:script, script.inline&.html_safe, attributes)
+      else
+        # Inert until the visitor agrees: browsers neither execute nor fetch a
+        # script of an unknown type, and the src lives in a data attribute so
+        # it is not even requested.
+        attributes[:type] = "text/plain"
+        attributes[:data]["consently-src"] = script.src if script.external?
+        attributes[:data]["consently-async"] = "true" if script.async
+        attributes[:data]["consently-defer"] = "true" if script.defer
+        content_tag(:script, script.inline&.html_safe, attributes)
+      end
+    end
+  end
+end

data/app/javascript/consently/banner_controller.js ADDED Viewed

@@ -0,0 +1,190 @@
+import { Controller } from "@hotwired/stimulus"
+// The banner, the preferences panel, and the part that actually matters:
+// turning the blocked <script type="text/plain"> tags into live ones the
+// moment the visitor agrees, so nobody has to reload to be counted.
+export default class extends Controller {
+  static targets = ["card", "preferences", "category", "settingsButton", "saveButton", "cancelButton"]
+  // The panel slides open on a grid row, and things disappear by class rather
+  // than by inline style. Both class names come from the markup, so restyling
+  // the banner never means touching this file.
+  static classes = ["open", "hidden"]
+  static values = {
+    cookie: { type: String, default: "consently" },
+    version: { type: String, default: "1" },
+    maxAge: { type: Number, default: 60 * 60 * 24 * 180 },
+    path: { type: String, default: "/" },
+    categories: Array,
+    googleConsentMode: { type: Boolean, default: true },
+    respectDoNotTrack: { type: Boolean, default: false },
+    respectGpc: { type: Boolean, default: true },
+    reload: { type: Boolean, default: false },
+    // Whether the visitor had already chosen when the page was rendered, so
+    // closing the panel knows whether to leave the banner behind or not.
+    decided: { type: Boolean, default: false },
+    logUrl: String,
+    nonce: String
+  }
+  connect() {
+    // An opt-out signal is an answer, so the banner never appears for it.
+    if (this.#optedOut()) this.rejectAll()
+  }
+  acceptAll() {
+    this.#store(this.categoriesValue)
+  }
+  rejectAll() {
+    this.#store([])
+  }
+  // Anything anywhere on the page carrying data-consently-open reopens the
+  // panel - a footer link is outside this controller's element, so it cannot
+  // carry an action of its own.
+  openFromLink(event) {
+    if (!event.target.closest("[data-consently-open]")) return
+    this.openPreferences(event)
+  }
+  openPreferences(event) {
+    if (event) event.preventDefault()
+    this.cardTarget.classList.remove(...this.hiddenClasses)
+    this.preferencesTarget.classList.add(...this.openClasses)
+    this.settingsButtonTarget.classList.add(...this.hiddenClasses)
+    this.settingsButtonTarget.setAttribute("aria-expanded", "true")
+    this.saveButtonTarget.classList.remove(...this.hiddenClasses)
+    this.cancelButtonTarget.classList.remove(...this.hiddenClasses)
+    // Someone who reopened this from a link in the footer is now looking at a
+    // panel their screen reader has not been told about.
+    this.cardTarget.focus({ preventScroll: true })
+  }
+  // Out of the panel without deciding anything: back to the short banner, or
+  // out of the way entirely if the visitor had already chosen before.
+  closePreferences() {
+    this.#collapse()
+    if (this.decidedValue) this.cardTarget.classList.add(...this.hiddenClasses)
+  }
+  savePreferences() {
+    this.#store(this.categoryTargets.filter((box) => box.checked).map((box) => box.value))
+  }
+  // Consent is written, the page catches up, and the choice is logged - in
+  // that order, so a failing log request cannot cost the visitor their click.
+  #store(categories) {
+    this.#writeCookie(categories)
+    this.#activateScripts(categories)
+    this.#updateGoogleConsent(categories)
+    this.#logConsent(categories)
+    this.#collapse()
+    this.cardTarget.classList.add(...this.hiddenClasses)
+    this.decidedValue = true
+    this.dispatch("change", { detail: { categories }, target: document, prefix: "consently" })
+    // Last, so anything listening for the event has already run.
+    if (this.reloadValue) window.location.reload()
+  }
+  #collapse() {
+    this.preferencesTarget.classList.remove(...this.openClasses)
+    this.settingsButtonTarget.classList.remove(...this.hiddenClasses)
+    this.settingsButtonTarget.setAttribute("aria-expanded", "false")
+    this.saveButtonTarget.classList.add(...this.hiddenClasses)
+    this.cancelButtonTarget.classList.add(...this.hiddenClasses)
+  }
+  #writeCookie(categories) {
+    const value = JSON.stringify({ v: this.versionValue, c: categories, t: new Date().toISOString() })
+    const secure = window.location.protocol === "https:" ? "; Secure" : ""
+    document.cookie = `${this.cookieValue}=${encodeURIComponent(value)}; path=${this.pathValue}; max-age=${this.maxAgeValue}; SameSite=Lax${secure}`
+  }
+  #activateScripts(categories) {
+    const granted = new Set([...categories, "necessary"])
+    document.querySelectorAll('script[type="text/plain"][data-consently-category]').forEach((blocked) => {
+      if (!granted.has(blocked.dataset.consentlyCategory)) return
+      const script = document.createElement("script")
+      // Copy everything the server put on the tag except our own bookkeeping,
+      // so vendor attributes like data-domain survive.
+      for (const { name, value } of blocked.attributes) {
+        if (name === "type" || name.startsWith("data-consently-")) continue
+        script.setAttribute(name, value)
+      }
+      script.dataset.consentlyCategory = blocked.dataset.consentlyCategory
+      if (this.nonceValue) script.setAttribute("nonce", this.nonceValue)
+      if (blocked.dataset.consentlySrc) {
+        script.src = blocked.dataset.consentlySrc
+      } else {
+        script.textContent = blocked.textContent
+      }
+      if (blocked.dataset.consentlyAsync) script.async = true
+      if (blocked.dataset.consentlyDefer) script.defer = true
+      blocked.replaceWith(script)
+    })
+  }
+  // Google's consent mode v2: the page loaded with everything denied, this
+  // lifts exactly what was granted.
+  #updateGoogleConsent(categories) {
+    if (!this.googleConsentModeValue) return
+    const analytics = categories.includes("analytics") ? "granted" : "denied"
+    const marketing = categories.includes("marketing") ? "granted" : "denied"
+    window.dataLayer = window.dataLayer || []
+    // gtag pushes its `arguments` object, not an array - Google's tags read it
+    // by position and an array is not the same thing to them.
+    const gtag = function () { window.dataLayer.push(arguments) }
+    gtag("consent", "update", {
+      analytics_storage: analytics,
+      ad_storage: marketing,
+      ad_user_data: marketing,
+      ad_personalization: marketing
+    })
+    window.dataLayer.push({ event: "consently_consent_update", consently_categories: categories.join(",") })
+  }
+  async #logConsent(categories) {
+    if (!this.logUrlValue) return
+    try {
+      await fetch(this.logUrlValue, {
+        method: "POST",
+        // The page may be reloading a moment later; keepalive means the
+        // request still reaches us instead of being cancelled.
+        keepalive: true,
+        headers: {
+          "Content-Type": "application/json",
+          "X-CSRF-Token": document.querySelector('meta[name="csrf-token"]')?.content ?? ""
+        },
+        body: JSON.stringify({ categories, version: this.versionValue })
+      })
+    } catch (error) {
+      // A lost log entry is not worth breaking the page over.
+      console.warn("[consently] could not record consent", error)
+    }
+  }
+  // Global Privacy Control is a binding opt-out signal in California and
+  // Colorado; Do Not Track is advisory, which is why that one is opt-in.
+  #optedOut() {
+    if (this.respectGpcValue && navigator.globalPrivacyControl === true) return true
+    return this.respectDoNotTrackValue &&
+      [navigator.doNotTrack, window.doNotTrack, navigator.msDoNotTrack].includes("1")
+  }
+}

data/app/models/consently/application_record.rb ADDED Viewed

@@ -0,0 +1,5 @@
+module Consently
+  class ApplicationRecord < ActiveRecord::Base
+    self.abstract_class = true
+  end
+end

data/app/models/consently/consent_record.rb ADDED Viewed

@@ -0,0 +1,18 @@
+module Consently
+  # Proof that a visitor agreed to something, and to what. Optional: create it
+  # with `rails g consently:consent_log` and switch config.log_consents on.
+  class ConsentRecord < ApplicationRecord
+    self.table_name = "consently_consent_records"
+    scope :for_version, ->(version) { where(consent_version: version.to_s) }
+    scope :in_scope, ->(scope) { where(scope: scope.to_s) }
+    def categories
+      self[:categories].to_s.split(",").map(&:to_sym)
+    end
+    def granted?(category)
+      category.to_sym == Consent::NECESSARY || categories.include?(category.to_sym)
+    end
+  end
+end

data/app/views/consently/_banner.html.erb ADDED Viewed

@@ -0,0 +1,93 @@
+<%# Plain CSS classes, no framework: see app/assets/stylesheets/consently.css.
+    The container stays in the DOM after a choice is made so that
+    `consently_preferences_link` has something to reopen. Run
+    `rails g consently:views` to take this file over into your own app. %>
+<div id="consently"
+     class="consently"
+     data-turbo-permanent
+     data-controller="consently-banner"
+     data-action="click@document->consently-banner#openFromLink"
+     data-consently-banner-open-class="consently__panel--open"
+     data-consently-banner-hidden-class="consently-hidden"
+     data-consently-banner-cookie-value="<%= Consently.config.cookie_name %>"
+     data-consently-banner-version-value="<%= Consently.config.consent_version %>"
+     data-consently-banner-max-age-value="<%= Consently.config.cookie_max_age %>"
+     data-consently-banner-path-value="<%= Consently.config.cookie_path %>"
+     data-consently-banner-categories-value="<%= categories.map(&:to_s).to_json %>"
+     data-consently-banner-google-consent-mode-value="<%= Consently.config.google_consent_mode %>"
+     data-consently-banner-respect-do-not-track-value="<%= Consently.config.respect_do_not_track %>"
+     data-consently-banner-respect-gpc-value="<%= Consently.config.respect_global_privacy_control %>"
+     data-consently-banner-reload-value="<%= Consently.config.reload_after_choice %>"
+     data-consently-banner-decided-value="<%= consent.given? %>"
+     data-consently-banner-log-url-value="<%= consently_log_url %>"
+     data-consently-banner-nonce-value="<%= content_security_policy_nonce %>">
+  <%# A non-modal dialog: it must be announced and reachable, but it must not
+      trap anyone who came to read the page. tabindex lets the reopen link put
+      focus here without adding the card to the tab order. %>
+  <div class="consently__card <%= "consently-hidden" if consent.given? %>"
+       data-consently-banner-target="card"
+       role="dialog"
+       aria-modal="false"
+       aria-labelledby="consently-message"
+       tabindex="-1">
+    <p class="consently__text" id="consently-message">
+      <%= t("consently.banner.message") %>
+      <% if policy_url.present? %>
+        <%= link_to t("consently.banner.policy_link"), policy_url, class: "consently__link" %>
+      <% end %>
+    </p>
+    <div class="consently__panel" id="consently-preferences" data-consently-banner-target="preferences">
+      <div class="consently__panel-inner">
+        <div class="consently__options">
+          <label class="consently__option">
+            <%# Always on, and shown that way rather than hidden: people look for it. %>
+            <%= tag.input type: "checkbox", checked: true, disabled: true %>
+            <span>
+              <span class="consently__option-name"><%= t("consently.categories.necessary.name") %></span>
+              <span class="consently__option-description"><%= t("consently.categories.necessary.description") %></span>
+            </span>
+          </label>
+          <% categories.each do |category| %>
+            <label class="consently__option">
+              <%= tag.input type: "checkbox", value: category, checked: consent.granted?(category),
+                    id: "consently-#{category}", data: { consently_banner_target: "category" } %>
+              <span>
+                <span class="consently__option-name"><%= t("consently.categories.#{category}.name", default: category.to_s.humanize) %></span>
+                <span class="consently__option-description"><%= t("consently.categories.#{category}.description", default: "") %></span>
+              </span>
+            </label>
+          <% end %>
+        </div>
+      </div>
+    </div>
+    <div class="consently__actions">
+      <button type="button" data-action="consently-banner#acceptAll" class="consently__button consently__button--primary">
+        <%= t("consently.banner.accept_all") %>
+      </button>
+      <button type="button" data-action="consently-banner#rejectAll" class="consently__button">
+        <%= t("consently.banner.reject_all") %>
+      </button>
+      <button type="button" data-action="consently-banner#openPreferences"
+              data-consently-banner-target="settingsButton"
+              aria-expanded="false"
+              aria-controls="consently-preferences"
+              class="consently__button consently__button--quiet">
+        <%= t("consently.banner.preferences") %>
+      </button>
+      <button type="button" data-action="consently-banner#savePreferences"
+              data-consently-banner-target="saveButton"
+              class="consently__button consently-hidden">
+        <%= t("consently.banner.save") %>
+      </button>
+      <%# Only offered while the panel is open - a way back out of it. %>
+      <button type="button" data-action="consently-banner#closePreferences"
+              data-consently-banner-target="cancelButton"
+              class="consently__button consently__button--quiet consently-hidden">
+        <%= t("consently.banner.cancel") %>
+      </button>
+    </div>
+  </div>
+</div>

data/app/views/consently/_policy.html.erb ADDED Viewed

@@ -0,0 +1,85 @@
+<%# A cookie policy that cannot go stale: it is rendered from the same
+    configuration the tags are, so a tag added to the initializer shows up
+    here, in the right category, with the cookies it sets.
+    Plain CSS, scoped under .consently-policy - see the gem's stylesheet.
+    `rails g consently:views` to take it over. %>
+<div class="consently-policy">
+  <% Consently.config.categories.each do |category| %>
+    <% providers = tags.select { |provider| provider.category == category } %>
+    <section class="consently-policy__category">
+      <div class="consently-policy__heading">
+        <h2 class="consently-policy__title"><%= t("consently.categories.#{category}.name", default: category.to_s.humanize) %></h2>
+        <% if consent.granted?(category) %>
+          <span class="consently-policy__status consently-policy__status--granted"><%= t("consently.policy.granted") %></span>
+        <% else %>
+          <span class="consently-policy__status"><%= t("consently.policy.denied") %></span>
+        <% end %>
+      </div>
+      <p class="consently-policy__description"><%= t("consently.categories.#{category}.description", default: "") %></p>
+      <% if providers.empty? %>
+        <p class="consently-policy__empty"><%= t("consently.policy.no_tags") %></p>
+      <% else %>
+        <% providers.each do |provider| %>
+          <div class="consently-policy__vendor">
+            <p class="consently-policy__vendor-name">
+              <%= provider.key.to_s.titleize %>
+              <span class="consently-policy__vendor-id"><%= provider.options[:id] || provider.options[:domain] %></span>
+            </p>
+            <% if provider.cookies.empty? %>
+              <p class="consently-policy__empty"><%= t("consently.policy.no_cookies") %></p>
+            <% else %>
+              <table class="consently-policy__table">
+                <thead>
+                  <tr>
+                    <th><%= t("consently.policy.cookie_name") %></th>
+                    <th><%= t("consently.policy.cookie_duration") %></th>
+                  </tr>
+                </thead>
+                <tbody>
+                  <% provider.cookies.each do |cookie| %>
+                    <tr>
+                      <td><code><%= cookie.name %></code></td>
+                      <td>
+                        <%= cookie.session? ? t("consently.policy.duration_session") : t("consently.policy.duration_days", count: cookie.days) %>
+                      </td>
+                    </tr>
+                  <% end %>
+                </tbody>
+              </table>
+            <% end %>
+          </div>
+        <% end %>
+      <% end %>
+    </section>
+  <% end %>
+  <section class="consently-policy__category">
+    <h2 class="consently-policy__title"><%= t("consently.policy.own_heading") %></h2>
+    <p class="consently-policy__description"><%= t("consently.policy.own_body") %></p>
+    <table class="consently-policy__table">
+      <thead>
+        <tr>
+          <th><%= t("consently.policy.cookie_name") %></th>
+          <th><%= t("consently.policy.cookie_duration") %></th>
+          <th><%= t("consently.policy.own_version") %></th>
+        </tr>
+      </thead>
+      <tbody>
+        <tr>
+          <td><code><%= Consently.config.cookie_name %></code></td>
+          <td><%= t("consently.policy.duration_days", count: Consently.config.cookie_max_age / 86_400) %></td>
+          <td><%= Consently.config.consent_version %></td>
+        </tr>
+      </tbody>
+    </table>
+  </section>
+  <p class="consently-policy__footer">
+    <%= consently_preferences_link %>
+  </p>
+</div>

data/config/importmap.rb ADDED Viewed

@@ -0,0 +1,3 @@
+# Pinned for the host application, so `import "consently/banner_controller"`
+# resolves without anyone editing their own importmap.
+pin "consently/banner_controller", to: "consently/banner_controller.js", preload: true

data/config/locales/cs.yml ADDED Viewed

@@ -0,0 +1,33 @@
+cs:
+  consently:
+    banner:
+      message: "Používáme soubory cookie, aby tento web fungoval, a s vaším souhlasem také k tomu, abychom rozuměli, jak jej používáte, a mohli vám ukazovat relevantní nabídky."
+      policy_link: "Přečtěte si naše zásady cookies."
+      accept_all: "Přijmout vše"
+      reject_all: "Odmítnout vše"
+      preferences: "Nastavení"
+      save: "Uložit volbu"
+      cancel: "Zrušit"
+    preferences_link: "Nastavení cookies"
+    policy:
+      granted: "souhlas udělen"
+      denied: "bez souhlasu"
+      no_tags: "V této kategorii nic není."
+      no_cookies: "Nenastavuje žádné cookies."
+      cookie_name: "Cookie"
+      cookie_duration: "Doba uložení"
+      duration_days: "%{count} dní"
+      duration_session: "do zavření prohlížeče"
+      own_heading: "Samotná cookie se souhlasem"
+      own_body: "Vaše volba je uložená v jedné cookie ve vašem prohlížeči: kategorie, se kterými jste souhlasili, verze těchto zásad a čas. Nic o vás."
+      own_version: "Verze zásad"
+    categories:
+      necessary:
+        name: "Nezbytné"
+        description: "Nutné pro fungování webu. Nelze je vypnout."
+      analytics:
+        name: "Analytické"
+        description: "Ukazují nám, jak web používáte, abychom jej mohli zlepšovat."
+      marketing:
+        name: "Marketingové"
+        description: "Umožňují nám ukazovat vám nabídky, které odpovídají vašim zájmům."

data/config/locales/de.yml ADDED Viewed

@@ -0,0 +1,33 @@
+de:
+  consently:
+    banner:
+      message: "Wir verwenden Cookies, damit diese Website funktioniert - und mit Ihrer Einwilligung, um zu verstehen, wie sie genutzt wird, und Ihnen passende Angebote zu zeigen."
+      policy_link: "Zur Cookie-Richtlinie."
+      accept_all: "Alle akzeptieren"
+      reject_all: "Alle ablehnen"
+      preferences: "Einstellungen"
+      save: "Auswahl speichern"
+      cancel: "Abbrechen"
+    preferences_link: "Cookie-Einstellungen"
+    policy:
+      granted: "eingewilligt"
+      denied: "nicht eingewilligt"
+      no_tags: "Nichts in dieser Kategorie."
+      no_cookies: "Setzt keine Cookies."
+      cookie_name: "Cookie"
+      cookie_duration: "Speicherdauer"
+      duration_days: "%{count} Tage"
+      duration_session: "bis zum Schließen des Browsers"
+      own_heading: "Das Einwilligungs-Cookie selbst"
+      own_body: "Ihre Wahl liegt in einem Cookie in Ihrem Browser: die Kategorien, denen Sie zugestimmt haben, die Version dieser Richtlinie und die Uhrzeit. Nichts über Sie."
+      own_version: "Version der Richtlinie"
+    categories:
+      necessary:
+        name: "Notwendig"
+        description: "Für den Betrieb der Website erforderlich. Sie lassen sich nicht abschalten."
+      analytics:
+        name: "Statistik"
+        description: "Zeigen uns, wie die Website genutzt wird, damit wir sie verbessern können."
+      marketing:
+        name: "Marketing"
+        description: "Erlauben uns, Ihnen Angebote zu zeigen, die zu Ihren Interessen passen."