Cookies in this hub
14
Essential cookies are the small pieces of storage a site genuinely needs to deliver a service the visitor explicitly asked for, such as maintaining a logged-in session, storing cart contents, or preventing payment and security flows from breaking.
Cookies in this hub
14
Provider families
8
Default consent view
No consent required
Under Article 5(3) of the ePrivacy Directive, strictly necessary cookies can be set without prior consent. The exemption is narrow: the cookie must be required to provide the requested service, not merely useful for the operator.
Your job is to prove necessity, document the purpose, and ensure these cookies are not mixed with analytics or marketing logic in the same script bundle.
Banner copy tip: Describe the service the cookie supports, such as checkout, login, or fraud prevention, instead of vague wording like platform optimisation.
Need platform-specific implementation advice? Review the matching hub for Shopify, WordPress, WooCommerce, PrestaShop.
Cloudflare bot-management cookie. Distinguishes bots from human visitors and is necessary for site security and Bot Management.
Cloudflare rate-limiting cookie. Used to identify trusted web traffic and protect origin servers from abuse.
Set after a visitor passes a Cloudflare challenge (CAPTCHA, JavaScript challenge, Managed Challenge). Required for site access.
Stripe machine-identifier cookie used for fraud prevention on payment forms.
Stripe session-identifier cookie used for fraud prevention on payment forms.
PayPal fraud-prevention and security cookie used during checkout.
Shopify shopping-cart identifier used to associate cart contents with the visitor's browser.
Shopify secure session cookie used for checkout and authenticated areas of the storefront.
WooCommerce cart-hash cookie. Indicates when the cart contents change so the front-end can reload cart fragments.
WooCommerce cart-items counter. Tracks the number of items currently in the cart.
WooCommerce session cookie. Holds a unique code for the customer so cart and order data can be retrieved from the database.
Set when a user logs in to WordPress. Used by the WordPress interface to keep the user signed in.
PrestaShop session cookie. Stores cart, user, and language state for the storefront.
PHP session-identifier cookie. Used by PHP-based platforms (Magento, Drupal, custom apps) to maintain user session state.
Run a CookieSentry scan to see which essential cookies appear on your live pages before consent, and export a report your privacy team can act on.
Run a free scan →