Provider
MetaSee all Meta cookies →Session token authenticating signed-in Facebook / Instagram users. Sent to Meta from any third-party page embedding a Meta widget while the visitor is logged in to Meta.
1 year
Meta Platforms Ireland Ltd.
xs is a social media cookie. Under Art. 5(3) ePrivacy Directive and the GDPR, it must not be set before the visitor has given prior, informed, freely-given consent.
If your scanner finds xs on a page before the visitor interacts with your consent banner, that's a violation — the cookie loaded without a legal basis.
Fix: gate the script that sets this cookie behind your CMP, so it only fires after the relevant consent category is accepted.
Run a free CookieSentry scan to find every cookie set before consent — including xs — and get a downloadable evidence PDF.
Run a free scan →