Cookie entries
14
These cookies are exempt only when they are strictly necessary to provide a service the visitor explicitly asked for, such as maintaining login state, carts, fraud prevention, or payment continuity.
Cookie entries
14
Categories covered
1
Main question answered
Cookies that do not require consent
The exemption is narrow. If the same script also performs analytics, personalization, or marketing functions, the no-consent argument quickly falls apart.
Exempt cookies still need to be documented transparently. The fact that consent is not required does not remove your duty to explain purpose, provider, and expiry.
Functional cookies are not included here because many of them require a separate necessity assessment rather than relying on the strict exemption.
Cloudflare bot-management cookie. Distinguishes bots from human visitors and is necessary for site security and Bot Management.
Cloudflare rate-limiting cookie. Used to identify trusted web traffic and protect origin servers from abuse.
Set after a visitor passes a Cloudflare challenge (CAPTCHA, JavaScript challenge, Managed Challenge). Required for site access.
Stripe machine-identifier cookie used for fraud prevention on payment forms.
Stripe session-identifier cookie used for fraud prevention on payment forms.
PayPal fraud-prevention and security cookie used during checkout.
Shopify shopping-cart identifier used to associate cart contents with the visitor's browser.
Shopify secure session cookie used for checkout and authenticated areas of the storefront.
WooCommerce cart-hash cookie. Indicates when the cart contents change so the front-end can reload cart fragments.
WooCommerce cart-items counter. Tracks the number of items currently in the cart.
WooCommerce session cookie. Holds a unique code for the customer so cart and order data can be retrieved from the database.
Set when a user logs in to WordPress. Used by the WordPress interface to keep the user signed in.
PrestaShop session cookie. Stores cart, user, and language state for the storefront.
PHP session-identifier cookie. Used by PHP-based platforms (Magento, Drupal, custom apps) to maintain user session state.
Use CookieSentry to scan your live pages, catch early-firing cookies, and export evidence your privacy team or agency can use to remediate the issue.
Run a free scan →