What are cookies, and how do the different types compare?

Cookies can be necessary or optional, first-party or third-party, temporary or persistent. These categories overlap, so this guide explains what the main terms mean and how they relate to one another.

First-party and third-party cookies

The distinction depends on the site context and which domain sets or receives the cookie:

• A First-party cookie is associated with the website the visitor is using. It may support functions such as a login session, language choice or basket.
• Third-party cookies are associated with a different domain embedded or called by the site. They are often used for cross-site services, advertising or measurement, although their purpose depends on the implementation.

Looking for analytics software designed to work without cookies? See our overview of Google Analytics alternatives.

What does “second-party data” mean?

As Second-party cookie The phrase “second-party cookie” is uncommon and can be ambiguous. More often, marketers use “second-party data” to describe another organisation’s first-party data shared directly under an agreement. First-, second- and third-party data .

Which cookies require consent?

Under EU rules, storing or accessing information on a user’s device generally requires consent unless the operation is strictly necessary to provide a service explicitly requested by the user. A login-session or basket cookie may qualify for that exemption. The assessment must focus on the actual purpose and implementation.

The Non-essential analytics, performance and marketing cookies should normally remain inactive until the required opt-in has been obtained.

A website may be able to operate without an analytics-cookie when it sets no non-essential cookies and the wider processing has another valid legal basis. This requires an assessment of the entire technology, not just the absence of cookies. Trackboxx is designed to provide web analytics without conventional analytics cookies and to minimise personal data. The legal requirements still depend on the concrete setup and jurisdiction.

Should you block cookies?

Major browsers let people restrict or remove cookies. Consent controls on websites should also allow visitors to choose which optional purposes they accept.

Blocking strictly necessary cookies can prevent features such as login or checkout from working. Restricting third-party cookies usually has less visible impact, although embedded services such as chat, video or payment tools may be affected. Review each category by purpose rather than assuming that every first-party cookie is safe or every third-party cookie is harmful.