Cookies that the site cannot function properly without. This includes cookies for access to secure areas and CSRF security. Please note that Craft’s default cookies do not collect any personal or sensitive information. Craft's default cookies do not collect IP addresses. The information they store is not sent to Pixel & Tonic or any 3rd parties.
Name: CraftSessionId
Description: Craft relies on PHP sessions to maintain sessions across web requests. That is done via the PHP session cookie. Craft names that cookie “CraftSessionId” by default, but it can be renamed via the phpSessionId config setting. This cookie will expire as soon as the session expires.
Provider: this site
Expiry: Session
Name: *_identity
Description: When you log into the Control Panel, you will get an authentication cookie used to maintain your authenticated state. The cookie name is prefixed with a long, randomly generated string, followed by _identity. The cookie only stores information necessary to maintain a secure, authenticated session and will only exist for as long as the user is authenticated in Craft.
Provider: this site
Expiry: Persistent
Name: *_username
Description: If you check the "Keep me logged in" option during login, this cookie is used to remember the username for your next authentication.
Provider: this site
Expiry: Persistent
Name: CRAFT_CSRF_TOKEN
Description: Protects us and you as a user against Cross-Site Request Forgery attacks.
Provider: this site
Expiry: Session
Statistic cookies help us understand how visitors interact with websites by collecting and reporting information anonymously.Google Analytics, as per its terms, does not collect any personally identifiable information (PII), such as name, email address, mailing address, precise location, or phone number. However, it does use persistent identifiers like IP addresses – which are not stored in your database, but in the Google server – and UserID and ClientID to track sessions across devices and store them in reports.Analytics does not consider persistent identifiers and cookie identifiers as PII. However, as per GDPR, personal data is any data that can be used to identify a living individual – either directly or indirectly. This includes common identifiers like name and email address, but also extends to online identifiers like IP address and cookie identifiers.
Name: _ga
Description: This cookie is used to distinguish users on your website. It calculates visitor, session, and campaign data and keeps track of site usage for the site’s analytics report.
Provider: Google
Expiry: 2 years
Name: _gid
Description: This cookie is used to distinguish users on your website. It is used to store information on how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected includes the number of visitors, their source, and the pages visited.
Provider: Google
Expiry: 24 hours
Name: _gat
Description: This cookie limits the user requests and expires in one minute.
Provider: Google
Expiry: 1 minute
Name: AMP_TOKEN
Description: This cookie assigns a unique Client ID to each user visiting your website.
Provider: Google
Expiry: Between 30 seconds to one year.
Name: _gac_<property-id>
Description: This cookie collects information about ad campaigns if linked with Google Ads.
Provider: Google
Expiry: 90 Days