An HTTP cookie is a piece of data stored by the user's web browser. Unless otherwise specified, cookies can be created, read, modified and deleted and modified both by JavaScript and from server-side scripts by reading the headers.

learn more… | top users | synonyms

30
votes
6answers
3k views

Standard ratio of cookies to “visitors”?

As noted in a recent blog post, We see a large discrepancy between Google Analytics "visitors" and Quantcast "visitors". Also, for reasons we have never figured out, Google Analytics just gets ...
19
votes
3answers
12k views

How do I set up a cookie-less domain?

I've read that it's best to serve static content (css, javascript, etc.) from a cookie-less domain or subdomain for better performance. I assume a domain is not cookie-less by default. How do I ...
15
votes
7answers
3k views

Does the EU cookie law apply to an EU site that is hosted outside of the EU?

I have been reading up about this EU cookie law, and have also had in depth conversations with my girlfriend who is a solicitor/lawyer and with colleagues while building websites. While we are now ...
15
votes
5answers
3k views

Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer?

So Google uses cookies when performing its usual duties of tracking users on a website. That is just it though; Google are setting the cookies and not your website as such. This is by virtue of the ...
15
votes
3answers
3k views

Are cookie warnings still required under the EU cookie law?

Is it still required to provide a cookie warning offering users the ability to opt in/out of cookie tracking? I cannot find any official advice on what we are supposed to be doing. I'm not looking ...
12
votes
1answer
1k views

Do many users turn off cookies?

Just how generally prevalent is it that users have cookies disabled in their browsers? I want to set a cookie during a user's session so that all the pages know that the presence of a particular ...
10
votes
2answers
608 views

How many domains to split components across?

I understand how splitting components across domains can maximize parallel downloads, and enable you to have cookie-free static content domains, but since there's a time cost for each domain lookup ...
7
votes
3answers
545 views

Why is the EU cookie directive causing so much excitement?

I am confused by all the excitement surrounding the EU cookie directive; why is it such a painful thing? As far as I can see cookies that are required for your site to function are allowed such as ...
7
votes
1answer
158 views

Does the SPDY protocol eliminate the need for cookieless domains?

With plain HTTP, cookieless domains are an optimization to avoid unnecessarily sending cookie headers for page resources. However, the SPDY protocol compresses HTTP headers and in some cases ...
7
votes
2answers
4k views

How to use cookies in a secure manner to authenticate users?

In most cases I like using cookies to remember returning users to my websites. In my early/foolish days, I would store a UserID (auto-increment integer) in a cookie and if the user returned I would ...
6
votes
4answers
3k views

How can I tell Google Analytics to not use cookies for my sub domain?

I have my web site at example.com, and i have also setup a sub domain for serving static content at static.example.com. On my web pages I'm using Google Analytics, so it will attach its cookies to all ...
6
votes
1answer
3k views

What happens if I try to set a cookie on a bot?

I'm building my site to include some user-identifying cookies. When a visitor chimes in, I will set a cookie with a unique visitor id (a guid) and the date-time of the visit, and save a visit record (...
6
votes
3answers
1k views

Multiple google analytics instances on a page?

My company creates (and hosts) sites for many different clients. We allow clients to send us tracking code, including Google Analytics, and we put them on the page. We would also like to include our ...
6
votes
1answer
252 views

Has the EU sued any site(s) yet for not complying with their cookie “law”?

EUROPA websites must follow the Commission's guidelines on privacy and data protection and inform users that cookies are not being used to gather information unnecessarily. - source Many people find ...
6
votes
1answer
4k views

Disable __cfduid cookie from Cloudflare

Is there a Cloudflare setting that corresponds to the creation of the __cfduid session cookie? I'm currently trying out CF; mostly for the neat DNS management and the implicit CDN. But the basic WAF ...
5
votes
2answers
3k views

What is the BCSI-CS-**** cookie for?

I'm undertaking an audit of the cookies we use on our external sites. There's one cookie that's used by all the sites, and by different domains within the sites. It starts BCSI-CS- and has random ...
5
votes
1answer
692 views

Forced GZIP Detection on Google App Engine

Some clients are appearing on our Google App Engine instances without the Accept-Encoding header. We normally use the set a cookie with an appended iframe technique (or variation thereof) to detect ...
5
votes
1answer
936 views

Google Analytics cookie across SagePay checkout

We use SagePay's Server integration for our online payments. We use Google Analytics to track activity on our website and Google Ecommerce tracking to log transactions. In Google Analytics, under the ...
4
votes
3answers
180 views

MediaWiki and EU cookie consent

I own a MediaWiki website that is showing Google AdSense. As of September 30th 2015 AdSense requires compliance with the EU cookie law. The Google Adsense Team is pointing to https://www.google.com/...
4
votes
2answers
354 views

Is it possible to track URL parameters and then the value of a cookie?

I have recently launched a site for a customer which we would like to track initial visits on URLs like below via Google Analytics, and then track revisits on their respective referral code: Users ...
4
votes
3answers
3k views

Session cookie being dropped when moving under the SSL

The short version: I've got a session cookie being set on a dev site but it's not being picked up when I move to the SSL (so the shopping cart empties when you go to the checkout). When it's set on ...
4
votes
1answer
637 views

Website visitors with same PHP session ID, same cookies, but different IPs and user agents, all within one second. What are they and how to stop them?

We've noticed an unusual and growing pattern in visits to our website. When a user visits, we set a PHP session ID, set cookies, and record the user agent and ip. What we've seen happening a lot ...
4
votes
2answers
760 views

Google Analytics setting cookies on static content despite being on entirely separate domain

I recently decided to comply with the YSlow recommendation that static content is hosted on a cookieless domain. As I already use the root of my domain (donaldjenkins.com) to host my website—on which ...
4
votes
1answer
773 views

Age verification in website questions

I am working on a website for a client that is requesting a way to verify your age. I have debated on creating a cookie that stores your age but I am unsure on a few things. How does SEO play into ...
3
votes
1answer
555 views

Who is affected by the EU cookie law?

Every source on the web keeps telling me what the cookie law is, but not whether I have to obey it or not. So I'm asking here: who must obey the cookie law? Is a website hosted by a server ...
3
votes
1answer
5k views

Do iframes have access to the cookies of the hosting domain?

We want to build an ad-frame which will run on external sites (e.g. YYY.com). The external site will place an iframe to our site (ZZZ.com/ourAdContent.html) and we will show some ads in this frame. ...
3
votes
2answers
44 views

How do I keep track of UTM referrer during an account activation process?

I have an email campaign which has a tagged link to my website. It looks like this: http://example.com/join/?utm_medium=email&utm_source=search&utm_campaign=Outreach I want to know how many ...
3
votes
1answer
269 views

SEO - Does Google properly handle hreflang tags with links that just change the language settings in a session cookie?

I am currently working on a website that is available in multiple languages. I put some effort in atomatically detecting the users preferred language. This itself is working great. I also offer ...
3
votes
1answer
984 views

SEO for images: can I use a different (cookieless) domain?

We want to increase the value of some of our important images by means of SEO, and we want to start serving them from a different, i.e. cookieless, domain. We want to go from www.example.com/images/...
3
votes
1answer
44 views

cookies and useragent is not enough ? to emulate browser?

I am building kinda a search engine for online shops, and several website are blocking me although I check the robots.txt Let's take an example, I need to get this page: http://www.aliexpress.com/...
3
votes
1answer
2k views

What is the percentage of users that block cookies in their web browser?

What is the percentage of web users that use either cookie blocking software for their web browsers or software that blocks Google Analytics tracking?
3
votes
2answers
498 views

Google Tag Manager Uses iframe, is this problematic for IE?

Internet Explorer has a non-standard P3P privacy policy implementation (what a surprise). This prevents cookies from being loaded in iframes. Google Tag Manager uses an iframe. Does this cause ...
3
votes
1answer
2k views

Using .htaccess to set a cookie and 301 redirect

I currently have in my .htaccess: RewriteRule ^$ http://chfmaine.com/ [CO=moved:yes:chfmaine.com:1/,R=301,NE,NC,L] I was basing this off of this post. That's a lot more than I need but the setting ...
3
votes
2answers
404 views

Remember me or not?

I was told to post this on webmasters instead of stackoverflow. Is it safe to have the remember me feature? Would it be somewhat safe (knowing it won't be 100% safe) to allow users to close their ...
3
votes
1answer
31 views

What does “Slightly longer” mean in EU cookie law?

Since my site serves worldwide users, I feel it must comply with EU laws, especially the cookie law. I have some things on my site that uses cookies to save user settings, but on the EU laws page at ...
3
votes
1answer
151 views

How to handle pages that requires the use of session cookie?

I have a search page that uses session to track search criteria made by the user. A session cookie is created automatically when the page is launched. As bots do not use cookie, 1000s of sessions ...
3
votes
1answer
155 views

How to offer a cookie opt in/out to users? [duplicate]

Possible Duplicate: Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer? I intend to use Google Analytics, and as I understand it I will need ...
3
votes
5answers
327 views

Variable IPs: How variable are they? Best practices for tracking

There are a lot of questions on StackOverflow relating to session security / session hijacking, but there doesn't seem to be a really good solution to the problem. The three most common suggestions ...
3
votes
1answer
66 views

GA cookie data passed cross-domain from a form submission?

Hello fellow webmasters, So I have successfully set up cross domain tracking using tag manager and getting the unique clientId cookie data to be passed via URL parameter and seeing users convert in a ...
3
votes
2answers
163 views

Cookie Audit help needed [closed]

Can anyone recommend any decent cookie audit plugins for firefox or chrome I can see the typical google cookies on the site but I am struggling to find out what a couple of the other cookies actually ...
2
votes
4answers
3k views

SEO - Redirect on first page (site.com -> site.com/en)

I have website with multiple languages and at first entrance it checks for cookie and if no cookie is present then it defaults to English language and redirects to site.com/en. So basically every ...
2
votes
4answers
495 views

Can someone explain how FaceBook's cookie tracks you while logged out?

This article claims that Facebook tracks what you do, even when you're logged off of Facebook, via cookies. Now, a cookie is just a text file... that is read/written to while you're actually on that ...
2
votes
1answer
225 views

Does adding LinkedIn button to a website result in cookies that track users?

We are planning to add the LinkedIn button in our website. But the restriction we are having is, the website should not use the cookies which collect the personal information. No impersonation. But I ...
2
votes
2answers
70 views

How does this stackexchange form saved the work, I mean keep an auto save function, to retrieve loss of work

How does this stackexchange form saved the work, I mean keep an auto save function, to retrieve loss of work, in case the user's browser crashes.
2
votes
1answer
42 views

Can I show a user an ad based on third-party cookies on their web browser?

Let's say I have a site that sells something. A user has no idea that my site exists, but they visit a competitor website which adds a cookie to their browser. Can I display advertising for my site ...
2
votes
2answers
247 views

Cookie manager PHP

I own a Joomla commerce store and although I use Google Analytics in order to track visitors, I need to install a cookie manager in order to be able to track cookies that were installed on customer ...
2
votes
1answer
92 views

Redirecting to a default (or last visited) subdirectory. Does Google like this?

i have a site that has 3 web applications, lets use this example: example.com/nicy example.com/mash example.com/zoken The main application is nicy, so if the user comes for the first time (or if ...
2
votes
1answer
110 views

How not to use Google Analytics cookies on Blogger?

I just noticed of a blog powered by Blogger which doesn't store any cookie, and therefore, doesn't need to show the annoying cookie popup. Checking Blogger options, I don't see anywhere where to get ...
2
votes
2answers
302 views

Can a website require search engine robots to support cookies?

Sometimes I pretend to be a search engine robot to get access to "subscriber only" web pages, or just to get a plain and simple view of a page that isn't cluttered with moving animations and other ...
2
votes
2answers
1k views

Setting cookies only on the naked domain

As far as I know, one can set a cookie for example.com and not .example.com and then the cookie will only be visible on example.com and not sub.example.com. Is this true? I have set a cookie on a test ...