GDPR compliant

[Oupsla]

Hello everyone,

With the new EU law related to private data and stuff (GDPR), we must follow new rules.

Not exhaustive list :

• Double opt-ins users, users must confirm their email after sign-up (only for login-fire-form) (Related issue: Email verification #105)
• User must check a checkbox (by default unchecked) when they sign up to accept "General conditions of use" or to accept to receive email from the app (newsletter, notification, ...).

I don't know if all stuff are related to login-fire (excepted for the email confirmation) but it could be nice to add a confirmation checkbox so login-fire handle acceptance of GCU.

Tell me what you think about it 😃 (ping @masonlouchart @sbeleidy @Protoss78 )

GDPR is coming in may 2018

[masonlouchart]

Exactly as you thought, all these things are not responsibility of the login-fire element except for the email confirmation input and Terms Of user and Privacy Policy acceptance.

Use a slot will let the user of login-fire to use a checkebox, toggle button or select list (by defaut the input will be a checkbox of course).

Maybe the GDPR allows only to have a checkbox?

[Oupsla]

I'm not really sure about the checkbox (it is maybe only when the app is sending email to users, the law is so long...) but we should (at least) add a link to the GCU with a sentence like "By clicking on "Create an account" below, you are agreeing to the Terms of Service and the Privacy Policy."

[masonlouchart]

Can you confirm it's related to the login-fire-form?

AFAIK, the federated identity providers provide a setting page to include link to GCU and Privacy Policy.

[JaySunSyn]

Related #171