Cookies that the site cannot function properly without. This includes cookies for access to secure areas and CSRF security. Please note that Craft’s default cookies do not collect any personal or sensitive information. Craft's default cookies do not collect IP addresses. The information they store is not sent to Pixel & Tonic or any 3rd parties.
Name: CraftSessionId
Description: Craft relies on PHP sessions to maintain sessions across web requests. That is done via the PHP session cookie. Craft names that cookie “CraftSessionId” by default, but it can be renamed via the phpSessionId config setting. This cookie will expire as soon as the session expires.
Provider: this site
Expiry: Session
Name: *_identity
Description: When you log into the Control Panel, you will get an authentication cookie used to maintain your authenticated state. The cookie name is prefixed with a long, randomly generated string, followed by _identity. The cookie only stores information necessary to maintain a secure, authenticated session and will only exist for as long as the user is authenticated in Craft.
Provider: this site
Expiry: Persistent
Name: *_username
Description: If you check the "Keep me logged in" option during login, this cookie is used to remember the username for your next authentication.
Provider: this site
Expiry: Persistent
Name: CRAFT_CSRF_TOKEN
Description: Protects us and you as a user against Cross-Site Request Forgery attacks.
Provider: this site
Expiry: Session
Name: __cf_bm
Description: Bot-management / security cookie used to protect forms from abuse.
Provider: hcaptcha.com
Expiry: Varies
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
Name: _ga
Description: Distinguishes users for analytics reporting.
Provider: This site and Google Analytics
Expiry: ~2 years
Name: _ga_00XWLRXN93
Description: Stores session/user state for GA4 property.
Provider: This site and Google Analytics
Expiry: ~2 years
