GDPR: Add an option to disable cookie persistence about loglevel

[pimterry]

You should talk to your own legal/privacy team, but I'm fairly confident that:

• You don't generally need consent for strictly functional cookies, which covers loglevel is most contexts, so I would be surprised if this really is required in most environments.
• In cases where this is required (e.g. using loglevel inside marketing code only) you do almost certainly need to disable persistence completely, not just cookies. GDPR & other EU laws do not regulate cookies. They regulate storage of information on an end user's computer, and they apply equally to cookies, localStorage, indexedDB, or anything else similar. You can already comply with this by completely disabling persistence in loglevel with the existing option.

Some more info here: https://law.stackexchange.com/a/30766. If there's a specific use case where you really do need to disable cookies to enforce usage of local storage only instead, I'd be super interested to hear about it and I'm happy to look into that, but AFAIK there's no privacy laws anywhere in the world that treat cookies differently to the other persistence features that loglevel uses.

[Kureev]

Apparently, it will take time to figure this one out on our side. I'll close this ticket for now and reopen if applicable. Thank you so much for your help!

[Kureev]

That's a great response, thank you! I'll double-check this with the legal team and come back to you 🙏

[xmedeko]

See #165