Questions tagged [cookie]

An HTTP cookie is a piece of data stored by the user's web browser. Unless otherwise specified, cookies can be created, read, modified and deleted and modified both by JavaScript and from server-side scripts by reading the headers.

Filter by
Sorted by
Tagged with
47 votes
5 answers
24k views

Are cookie warnings still required under the EU cookie law?

Is it still required to provide a cookie warning offering users the ability to opt in/out of cookie tracking? I cannot find any official advice on what we are supposed to be doing. I'm not looking ...
Double Clicked's user avatar
31 votes
6 answers
4k views

Standard ratio of cookies to "visitors"?

As noted in a recent blog post, We see a large discrepancy between Google Analytics "visitors" and Quantcast "visitors". Also, for reasons we have never figured out, Google Analytics just gets ...
Jeff Atwood's user avatar
  • 13.9k
24 votes
3 answers
21k views

How do I set up a cookie-less domain?

I've read that it's best to serve static content (css, javascript, etc.) from a cookie-less domain or subdomain for better performance. I assume a domain is not cookie-less by default. How do I ...
BenV's user avatar
  • 1,015
18 votes
3 answers
16k views

Disable __cfduid cookie from Cloudflare

Is there a Cloudflare setting that corresponds to the creation of the __cfduid session cookie? I'm currently trying out CF; mostly for the neat DNS management and the implicit CDN. But the basic WAF ...
mario's user avatar
  • 291
17 votes
7 answers
3k views

Does the EU cookie law apply to an EU site that is hosted outside of the EU?

I have been reading up about this EU cookie law, and have also had in depth conversations with my girlfriend who is a solicitor/lawyer and with colleagues while building websites. While we are now ...
mickburkejnr's user avatar
  • 1,312
17 votes
5 answers
3k views

Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer?

So Google uses cookies when performing its usual duties of tracking users on a website. That is just it though; Google are setting the cookies and not your website as such. This is by virtue of the ...
Treffynnon's user avatar
15 votes
1 answer
1k views

Has the EU sued any site(s) yet for not complying with their cookie "law"?

EUROPA websites must follow the Commission's guidelines on privacy and data protection and inform users that cookies are not being used to gather information unnecessarily. - source Many people find ...
dhaupin's user avatar
  • 3,319
14 votes
1 answer
3k views

Do many users turn off cookies?

Just how generally prevalent is it that users have cookies disabled in their browsers? I want to set a cookie during a user's session so that all the pages know that the presence of a particular ...
Cyberherbalist's user avatar
12 votes
1 answer
55k views

Do iframes have access to the cookies of the hosting domain?

We want to build an ad-frame which will run on external sites (e.g. YYY.com). The external site will place an iframe to our site (ZZZ.com/ourAdContent.html) and we will show some ads in this frame. ...
Skurpi's user avatar
  • 297
11 votes
4 answers
6k views

How can I tell Google Analytics to not use cookies for my sub domain?

I have my web site at example.com, and i have also setup a sub domain for serving static content at static.example.com. On my web pages I'm using Google Analytics, so it will attach its cookies to all ...
Magnus's user avatar
  • 295
11 votes
2 answers
12k views

Are session cookies exempt from consent under GDPR?

Session cookies - cookies that last only for the duration of the current session - are arguably not a tracking tool under the spirit of the EU's data protection efforts. Under old EU cookie rules, ...
Pekka's user avatar
  • 1,292
10 votes
2 answers
746 views

How many domains to split components across?

I understand how splitting components across domains can maximize parallel downloads, and enable you to have cookie-free static content domains, but since there's a time cost for each domain lookup ...
theotherreceive's user avatar
8 votes
1 answer
10k views

What happens if I try to set a cookie on a bot?

I'm building my site to include some user-identifying cookies. When a visitor chimes in, I will set a cookie with a unique visitor id (a guid) and the date-time of the visit, and save a visit record (...
Cyberherbalist's user avatar
8 votes
2 answers
5k views

How to use cookies in a secure manner to authenticate users?

In most cases I like using cookies to remember returning users to my websites. In my early/foolish days, I would store a UserID (auto-increment integer) in a cookie and if the user returned I would ...
jessegavin's user avatar
  • 2,158
8 votes
1 answer
197 views

Does the SPDY protocol eliminate the need for cookieless domains?

With plain HTTP, cookieless domains are an optimization to avoid unnecessarily sending cookie headers for page resources. However, the SPDY protocol compresses HTTP headers and in some cases ...
Clint Pachl's user avatar
7 votes
3 answers
597 views

Why is the EU cookie directive causing so much excitement?

I am confused by all the excitement surrounding the EU cookie directive; why is it such a painful thing? As far as I can see cookies that are required for your site to function are allowed such as ...
Treffynnon's user avatar
7 votes
1 answer
90 views

Is it required to list each cookie by name to comply with EU/UK Cookie Laws?

Some sites appear to list each cookie exhaustively, others (the majority) state only how they are used, and how a user may clear them. Do you need to list each cookie by name, together with what it ...
Flash's user avatar
  • 101
7 votes
1 answer
11k views

Chrome 80 clears session cookies for users returning from payment gateway

I'm managing several e-commerce websites, they are all custom build and they all accept credit card payments via bank redirection (website redirects the client to bank's payment page, bank redirects ...
Jimba's user avatar
  • 91
7 votes
1 answer
4k views

Cookie consent overlay - Does it affect SEO?

I have a german website with Adsense integrated. To meet Google's compliance requirements, I ask users to accept cookies for personal advertising. To achieve this, I created an overlay which stays in ...
koseduhemak's user avatar
6 votes
1 answer
2k views

Do i need User consent for Google Analytics to be GDPR complaint

I am using GA on website as everyone out there does same. In order to be GDPR complaint i had used "https://cookie-script.com" script to for user consent for one of my website and i notice for last ...
Learning's user avatar
  • 701
6 votes
2 answers
7k views

What is the BCSI-CS-**** cookie for?

I'm undertaking an audit of the cookies we use on our external sites. There's one cookie that's used by all the sites, and by different domains within the sites. It starts BCSI-CS- and has random ...
Joanne Mullally-Watts's user avatar
6 votes
3 answers
2k views

Multiple google analytics instances on a page?

My company creates (and hosts) sites for many different clients. We allow clients to send us tracking code, including Google Analytics, and we put them on the page. We would also like to include our ...
Doug Harris's user avatar
6 votes
1 answer
695 views

Should I hide the content inside the cookies law compliance banner from search engines?

I am working on my first website.I am working on the last steps before deploying it. Now I am facing the law compliance requirements. Right now it is mandatory by GDPR to show the cookies compliance ...
Raikish's user avatar
  • 113
6 votes
2 answers
2k views

Is it possible to block cookies that are set by externally hosted content?

Is it possible to block cookies that are set by externally hosted content embedded in a page? For example if I embed an image from a CDN, the response for this image may contain a Set-Cookie header, ...
jamieweb's user avatar
  • 185
6 votes
2 answers
2k views

First time message/popup in site (by cookie), Googlebot and SEO

I have a site (based on dynamic content by JS) and I want to trigger a first time popup to users in order to make them register to the newsletter (it will be cookies based). Is there a way to do that ...
Shushi's user avatar
  • 63
6 votes
1 answer
888 views

Forced GZIP Detection on Google App Engine

Some clients are appearing on our Google App Engine instances without the Accept-Encoding header. We normally use the set a cookie with an appended iframe technique (or variation thereof) to detect ...
Metalshark's user avatar
  • 3,683
5 votes
1 answer
926 views

Who is affected by the EU cookie law?

Every source on the web keeps telling me what the cookie law is, but not whether I have to obey it or not. So I'm asking here: who must obey the cookie law? Is a website hosted by a server physically ...
user1807's user avatar
  • 153
5 votes
3 answers
394 views

MediaWiki and EU cookie consent

I own a MediaWiki website that is showing Google AdSense. As of September 30th 2015 AdSense requires compliance with the EU cookie law. The Google Adsense Team is pointing to https://www.google.com/...
the's user avatar
  • 1,570
5 votes
1 answer
2k views

SEO for images: can I use a different (cookieless) domain?

We want to increase the value of some of our important images by means of SEO, and we want to start serving them from a different, i.e. cookieless, domain. We want to go from www.example.com/images/...
Oliver's user avatar
  • 338
5 votes
2 answers
135 views

I'm using a public device vs Keep me signed in

I know this might be an obvious question, but its escaping me. When logging on websites, I have seen check boxes for things like "i'm using a public device" and "Keep me signed in". I know keep me ...
imvain2's user avatar
  • 153
5 votes
1 answer
58 views

Visitors sending cookies that were never set by the host

Occasional visitors to my sites send one or more cookies that were never set by my hosts. Sometimes it's an obvious bot. Sometimes it's even an attempt to exploit. But occasionally it looks like a ...
pseudon's user avatar
  • 173
5 votes
1 answer
2k views

Website visitors with same PHP session ID, same cookies, but different IPs and user agents, all within one second. What are they and how to stop them?

We've noticed an unusual and growing pattern in visits to our website. When a user visits, we set a PHP session ID, set cookies, and record the user agent and ip. What we've seen happening a lot ...
LeeWenzu's user avatar
5 votes
1 answer
2k views

Google Analytics cookie across SagePay checkout

We use SagePay's Server integration for our online payments. We use Google Analytics to track activity on our website and Google Ecommerce tracking to log transactions. In Google Analytics, under the ...
AlexCambridgeUK's user avatar
4 votes
4 answers
4k views

SEO - Redirect on first page (example.com -> example.com/en)

I have website with multiple languages and at first entrance it checks for cookie and if no cookie is present then it defaults to English language and redirects to example.com/en. So basically every ...
sed's user avatar
  • 301
4 votes
1 answer
16k views

mod_rewrite to edit cookies conditionally

Is it possible to use mod_rewrite to modify values in cookies based upon a condition? I am completely new to HTTP, but I have tried a thing or two. The only regex I know is Perl-style, I hope it is ...
PinkElephantsOnParade's user avatar
4 votes
1 answer
117 views

Cookie consent message needed for web game high score?

I'm making an online word game and I want to use a cookie to store the user's high score so it will always show it when they play the game, not just for the session. To comply with the EU GDPR do I ...
Rob Kwasowski's user avatar
4 votes
2 answers
560 views

SEO Impact on presenting User details without login

I am looking to develop a functionality on our website in which i can a show user their name based on cookie data. There will be no login required. we will retrieve user's name based on the previous ...
Archit's user avatar
  • 41
4 votes
1 answer
498 views

Recent Samsung Internet browser update is blocking cookies for "log in" and "add to basket" on my site

Over the last couple of days I've had half a dozen users report to me that Samsung Internet has broken my website. (Although of course none of them realise this, they think the site is broken). ...
Codemonkey's user avatar
4 votes
2 answers
8k views

What is the percentage of users that block cookies in their web browser?

What is the percentage of web users that use either cookie blocking software for their web browsers or software that blocks Google Analytics tracking?
george's user avatar
  • 203
4 votes
2 answers
3k views

Is it possible to track URL parameters and then the value of a cookie?

I have recently launched a site for a customer which we would like to track initial visits on URLs like below via Google Analytics, and then track revisits on their respective referral code: Users ...
Jon's user avatar
  • 41
4 votes
1 answer
5k views

Using .htaccess to set a cookie and 301 redirect

I currently have in my .htaccess: RewriteRule ^$ http://chfmaine.com/ [CO=moved:yes:chfmaine.com:1/,R=301,NE,NC,L] I was basing this off of this post. That's a lot more than I need but the setting ...
user avatar
4 votes
3 answers
4k views

Session cookie being dropped when moving under the SSL

The short version: I've got a session cookie being set on a dev site but it's not being picked up when I move to the SSL (so the shopping cart empties when you go to the checkout). When it's set on ...
CD001's user avatar
  • 171
4 votes
1 answer
650 views

Drop and expire all cookies with a specific prefix

We're running a WordPress site with WooCommerce. A third party plugin was injecting (sbjs_*) cookies into our site to track purchases and provide us with additional reporting. Unfortunately, something'...
Dom's user avatar
  • 141
4 votes
1 answer
824 views

Google Analytics - Show logged in users and user status

I have control on the site and can set cookies or whatever necessary to mark the users, but not sure hot to set google analytics to allow me see breakdown of users by the login status and member ...
BenB's user avatar
  • 141
4 votes
1 answer
248 views

Is it valid to use a single cookie consent for multiple domains?

Many cookie consent services – for example SecurePrivacy, CookieBot, and CookiePro – allow "cross-domain" consent, where consenting with cookie usage on one domain will imply consent on ...
qff's user avatar
  • 141
4 votes
2 answers
60 views

Must cookie consent banner prevent site working?

I realized some types of cookie consent banners: a bar on the top or bottom of the page, with informations and options to select. The page remains interactive, user can browse menu and so on. a popup ...
Evgeniy's user avatar
  • 9,964
4 votes
1 answer
666 views

GA cookie data passed cross-domain from a form submission?

Hello fellow webmasters, So I have successfully set up cross domain tracking using tag manager and getting the unique clientId cookie data to be passed via URL parameter and seeing users convert in a ...
Avail's user avatar
  • 376
4 votes
2 answers
3k views

How to display Cookie Notification text to users that is ignored by Search Engines?

Websites within the EU are meant to inform users about the use of cookies on their website. Whilst the law raises plenty of implementation questions already, the general consensus is that we must at ...
Andrew Lott's user avatar
  • 5,874
4 votes
1 answer
203 views

How to offer a cookie opt in/out to users? [duplicate]

Possible Duplicate: Google Analytics and the EU cookie directive. Who will fall foul of the law? Google or the developer? I intend to use Google Analytics, and as I understand it I will need to ...
Digital Lightcraft's user avatar
4 votes
2 answers
1k views

Google Analytics setting cookies on static content despite being on entirely separate domain

I recently decided to comply with the YSlow recommendation that static content is hosted on a cookieless domain. As I already use the root of my domain (donaldjenkins.com) to host my website—on which ...
Donald Jenkins's user avatar