Questions tagged [cookie]

An HTTP cookie is a piece of data stored by the user's web browser. Unless otherwise specified, cookies can be created, read, modified and deleted and modified both by JavaScript and from server-side scripts by reading the headers.

Filter by
Sorted by
Tagged with
24 votes
3 answers
21k views

How do I set up a cookie-less domain?

I've read that it's best to serve static content (css, javascript, etc.) from a cookie-less domain or subdomain for better performance. I assume a domain is not cookie-less by default. How do I ...
4 votes
1 answer
205 views

Recent Samsung Internet browser update is blocking cookies for "log in" and "add to basket" on my site

Over the last couple of days I've had half a dozen users report to me that Samsung Internet has broken my website. (Although of course none of them realise this, they think the site is broken). ...
3 votes
1 answer
38 views

GTM + GA4 init after consent - Data loss?

Question about something I am not sure about. But the way I set everything up for my ecommerce site is: When people will visit the page they will get a Cookie Consent Bar which you can accept or will ...
1 vote
0 answers
102 views

No cookie is sent in a document request redirecting from another domain

The scenario happens when users placing orders on my site and use a third party payment method. They would go to the third party site and complete the payment (via POST request form submission). If ...
1 vote
1 answer
83 views

Cookie Free Subdomain on Flask

How do you set up a cookie free subdomain on Flask. My website already has subdomains, so setting that up is not a problem. But I'm not sure how to (a) request files across all subdomains (and the ...
3 votes
1 answer
28 views

Does Google analytics count as new users if users not revisit within 24hours on IOS14?

With regards to first party cookies, does Google analytics count as new users if the users not revisit on the website within 24 hours as a first party cookie is deleted within 24 hours?
2 votes
1 answer
45 views

Domain cookie (_ga) from upper-level domain

I have deleted Google analytics account, Google site Kit plugin and Google .html verification file from the server about 30 min ago. Yet, I see a _ga cookie still being set. For example, we can take ...
2 votes
1 answer
101 views

Cookie consent for promocode

We have an ecommerce site, and the promocode the user provides on the shopping bag is stored as a session cookie. Is this considered a strictly necessary cookie? If the user rejects non-essential ...
1 vote
1 answer
18 views

Having issues with Google indexing when using a cookie redirect splash page

I'm currently having issues with a site which is not able to be indexed due to a cookie redirect function that's in place. To summarize; when a user lands on the webpage for the first time they will ...
2 votes
1 answer
131 views

Why does CNAME Cloaking enable cross domain tracking?

Recently, as browsers start blocking 3rd party cookies, a risky technique known as CNAME Cloaking emerged. It is said that this technique enables trackers, especially those in the online advertising ...
1 vote
2 answers
2k views

Verify 2 cookies with mod_rewrite before serving images

I have the following mod_rewrite rule, which works fine in my Apache 2.x on CentOS 6 Linux machine, but it is not complete: RewriteCond %{HTTP_COOKIE} !id RewriteCond %{REQUEST_URI} ^/sites/default/...
1 vote
0 answers
294 views

Was youtube-nocookie.com always serving cookies or did it start recently? Is it a scam?

I've been using Youtube embeds in enhanced privacy mode by chang[ing] the domain for the embed URL in your HTML from https://www.youtube.com to https://www.youtube-nocookie.com I remember checking ...
46 votes
5 answers
24k views

Are cookie warnings still required under the EU cookie law?

Is it still required to provide a cookie warning offering users the ability to opt in/out of cookie tracking? I cannot find any official advice on what we are supposed to be doing. I'm not looking ...
2 votes
2 answers
855 views

What is "fourth-party" in advertisement?

While I understand third-party cookies, I am not sure to understand what exactly "fourth-party" means in sentences such as: Third and fourth party ad tracking is allowed on [website] ...
6 votes
1 answer
453 views

Should I hide the content inside the cookies law compliance banner from search engines?

I am working on my first website.I am working on the last steps before deploying it. Now I am facing the law compliance requirements. Right now it is mandatory by GDPR to show the cookies compliance ...
3 votes
0 answers
176 views

Is it valid to use a single cookie consent for multiple domains?

Many cookie consent services – for example SecurePrivacy, CookieBot, and CookiePro – allow "cross-domain" consent, where consenting with cookie usage on one domain will imply consent on ...
7 votes
1 answer
10k views

Chrome 80 clears session cookies for users returning from payment gateway

I'm managing several e-commerce websites, they are all custom build and they all accept credit card payments via bank redirection (website redirects the client to bank's payment page, bank redirects ...
4 votes
1 answer
49 views

Must cookie consent banner prevent site working?

I realized some types of cookie consent banners: a bar on the top or bottom of the page, with informations and options to select. The page remains interactive, user can browse menu and so on. a popup ...
1 vote
0 answers
41 views

Do I need a cookies notice?

I've read that if you are storing identifying information like the user's name or email address in cookies then you have to ask for consent. I just want to store the user's country code, like US, CA, ...
1 vote
0 answers
17 views

Does the same site cookie policy potentially change anything for CORS

According to the new same-site cookie policy (once implemented across all browsers) , a third party call from another page would not send along the cookies by default, unless the third party ...
0 votes
0 answers
21 views

Use value from 1st party cookie as a data layer variable

I have a script on website (located in functions.php), generating some value which is stored in cookie. I would like to pass this value to a GTM data layer. I've tried to import this value from from ...
0 votes
0 answers
67 views

Cookie Consent Needed for Higher Education Website

I work for a private college in California. Our site is mainly for prospective students. We use Google Analytics, but anonymize user IP addresses. What are the rules/laws for needing a cookie consent ...
1 vote
1 answer
107 views

Is it against EU-law to load Google Tag Manager, if I don't do anything with it?

Question Can I load Google Tag Manager on my page, if I don't record any data before the cookie consent is given from the visitor? Context I have a WordPress installation, with a Vue frontend. I ...
4 votes
1 answer
322 views

Drop and expire all cookies with a specific prefix

We're running a WordPress site with WooCommerce. A third party plugin was injecting (sbjs_*) cookies into our site to track purchases and provide us with additional reporting. Unfortunately, something'...
2 votes
0 answers
43 views

GDPR: Checking if user falls under GDPR terms

I am a bit confused about what is the proper way to detect whether a user falls under GDPR laws. Most websites use IP geolocation for this purpose, but what if the user is traveling while visiting the ...
1 vote
1 answer
436 views

How to check a specific domain request with HTACCESS and add some query string?

Is it possible to check a specific domain request with HTACCESS and add some query string? Actually my entire task wants to pass some cookie values as URL parameters if a specific domain is requested....
15 votes
1 answer
1k views

Has the EU sued any site(s) yet for not complying with their cookie "law"?

EUROPA websites must follow the Commission's guidelines on privacy and data protection and inform users that cookies are not being used to gather information unnecessarily. - source Many people find ...
0 votes
1 answer
874 views

Is it SEO-acceptable to do an automatic redirect based on Accept-Language header value

We are launching a big international web site, that has local web sites on other domains. We are planning to configure the web site to behave in the following manner: Of a user with German (de) ...
1 vote
1 answer
71 views

What happens if Analytics gtag.js cookie for the user ID expires? Does it keep the same user unique ID for the next cookie?

From: https://developers.google.com/analytics/devguides/collection/gtagjs/cookies-user-id#cookie_update Cookie update When cookie_update is set to true (the default value), gtag.js will update ...
1 vote
1 answer
53 views

Adsense - Proposed implementation of EU user consent policy

I have spent lot of time to understand EU user consent policy with respect to usage of cookies. In summary, as I understand, I cannot save any cookies of my websites (including analytics cookies, ...
1 vote
0 answers
29 views

Has anyone ever got in legal trouble for not having those horrific "cookie warnings" on their site? [duplicate]

I know about some idiotic EU "law" that made every damn website add the most obnoxious garbage ever: a huge "warning" about how they are "using cookies", which doesn't let you do anything until you "...
4 votes
1 answer
728 views

Google Analytics - Show logged in users and user status

I have control on the site and can set cookies or whatever necessary to mark the users, but not sure hot to set google analytics to allow me see breakdown of users by the login status and member ...
5 votes
2 answers
134 views

I'm using a public device vs Keep me signed in

I know this might be an obvious question, but its escaping me. When logging on websites, I have seen check boxes for things like "i'm using a public device" and "Keep me signed in". I know keep me ...
6 votes
1 answer
2k views

Do i need User consent for Google Analytics to be GDPR complaint

I am using GA on website as everyone out there does same. In order to be GDPR complaint i had used "https://cookie-script.com" script to for user consent for one of my website and i notice for last ...
2 votes
1 answer
288 views

Prevent account sharing for paid membership online content

What's the best way to catch account sharers? I thought about: See how many people are currently logged in with it (cookies) See how many logins there were in the past 24 hours See how many ...
2 votes
1 answer
40 views

Can I export my users' third party cookies such as those from Yandex to Google Ads?

I have been collecting cookies by different services like Yandex, Mautic, Facebook pixel etc. Now I need to share/import these Cookies to Google for make remarketing from my WEB by Google Ads. ...
1 vote
0 answers
29 views

Getting the utm_source value

I've been trying to achieve following but without success. I have a task where I have to get the utm_source value and pass it to the form. As an example if user types in on google the domain and goes ...
3 votes
2 answers
270 views

How can I use cookie-free domains with Microsoft Azure portal?

My website installed in the Microsoft's Azure portal. My website using asp.net and framework(sitecore cms). It's C#. I checked my website using gtmetrix. It recommends using cookie-free domains. I ...
1 vote
1 answer
65 views

Would a "this site uses cookies" notice be sufficient under the GDPR for cookies from other domains

I'm using a third-party analytics tool that sets a cookie to track the user for analytics purposes (for tracking conversions) as soon as the user hits the page. The analytics service does not store ...
4 votes
1 answer
109 views

Cookie consent message needed for web game high score?

I'm making an online word game and I want to use a cookie to store the user's high score so it will always show it when they play the game, not just for the session. To comply with the EU GDPR do I ...
7 votes
1 answer
3k views

Cookie consent overlay - Does it affect SEO?

I have a german website with Adsense integrated. To meet Google's compliance requirements, I ask users to accept cookies for personal advertising. To achieve this, I created an overlay which stays in ...
1 vote
1 answer
392 views

Can I have a cookie-less subdomain, if main website is on root domain but does not set any cookies?

Lets say I have a static website at example.com, it does not set any cookies. I have tracking on stats.example.com and a git server on git.example.com - both of which do set cookies. Static assets ...
2 votes
1 answer
589 views

Does Google AdSense require a privacy politcy and cookie notification popup?

I use to run ads from AdSense a few years ago on a website but because the website was not generating profit so much I stop running the ads. Now my AdSense account has to be activated again because it ...
1 vote
2 answers
122 views

What is the SEO impact of multiple redirects that return to the current page after setting a cookie?

We have a situation where we need to set a cookie on a user's session. In order to do this we currently have a series of redirects in place: Initial request > 30x to get the cookie > 30xset the ...
2 votes
2 answers
460 views

Do service workers require consent under GDPR?

I notice that Chrome puts service workers, indexed databases and local/session storage under "cookies" in the site info dropdown. Are these things in any way considered ways to access personal ...
31 votes
6 answers
4k views

Standard ratio of cookies to "visitors"?

As noted in a recent blog post, We see a large discrepancy between Google Analytics "visitors" and Quantcast "visitors". Also, for reasons we have never figured out, Google Analytics just gets ...
2 votes
0 answers
273 views

ISP Config broke my PHP sessions and cookies [closed]

To explain my problem I have to add some context info: We have a website, it works with sessions and has been working for 7 years with no problems, except for our server administrator, he can not ...
1 vote
1 answer
187 views

Google Bot Crawls using expired cookies and fails to get response

We are using a cookie on our website which is to fetch some information through an API. The cookie becomes invalid after a very small duration. Google Bot uses the same cookie again and again to ...
1 vote
1 answer
2k views

Google Analytics for cookie-based A/B testing (same URL for A and B)

I have a website with share-friendly URLs like example.com/register I implemented A/B testing as a cookie because I don't want ugly unsharable URLs like example.com/registerA and example.com/...
1 vote
2 answers
988 views

Massive drop in Google impressions for last two months after cookie script was added for GDPR

I was checking Google Search Console and noticed that there is massive drop in Google impressions since July, not sure what could be the reason. I remember that I integrated a cookiebot.com script ...