Cookie
An HTTP cookie is a small value that a server asks a browser to store and that may be returned with matching later requests. Cookies support session identifiers, language preferences, shopping baskets, or measurement functions. They do not necessarily store personal data in plain text, but even a pseudonymous identifier may relate to a person or device.
Scope and behaviour are controlled through attributes such as Domain, Path, Expires or Max-Age, Secure, HttpOnly, and SameSite. Cookies have size and quantity limits and are not general-purpose storage. Confidential data should not be stored directly in them. Technical necessity, consent, and retention must be assessed according to purpose and applicable law.
- Small values for matching web requests
- Commonly used for sessions and preferences
- Secure, HttpOnly, and SameSite reduce risks
- Do not store confidential data directly
- Make purpose and retention transparent
Frequently asked questions
A cookie is a small browser value that a website can set and receive again with matching later HTTP requests.
There is no universal answer. Purpose, technical necessity, and applicable law determine the requirement; non-essential analytics and advertising often require prior consent.
