Yo peeps, I’m currently looking into TCF Vendors, Ad partners and their whole corporate greed hellhole of tracking. I am writing a paper on this, and would like for everything to be factually correct. However, I am struggling to understand one particular part of this “transparency framework” and hope someone can help me clarify on cookie-duration.

As seen in the first thumbnail, the cookie duration is listed as 180 days. However, upon selecting > Storage Details, each cookie is displayed in further detail. In this detailed section, there are additional cookies with duration as high as 1825 days, not 180… So which is it? Currently, I’m (obviously) assuming the worst, as in, it being 1825 and not 180 days. There are additional cookies on this list, see spoiler below, that have cookies with the duration of 180 days. Why are the cookies with the highest duration listed on the first page? And if the answer is that “it would look worse”, then they also have cookies with lower amount of days than 180 that could have been used. There are multiple cookies with different durations, do all of them count?

If needed here is a spolier that includes all the cookies in detail from the Exactag GmbH vendor.

SPOILER

Exactag GmbH - Storage details Name: exactag_new_adoptout

Type: Cookie

Duration: 1825 (days)

Domain:

Purposes:

Store and/or access information on a device Refreshes Cookies: No

Name: exactag_new_ccoptout

Type: Cookie

Duration: 1825 (days)

Domain:

Purposes:

Store and/or access information on a device Refreshes Cookies: No

Name: exactag_new_optout

Type: Cookie

Duration: 1825 (days)

Domain:

Purposes:

Store and/or access information on a device Refreshes Cookies: No

Name: exactag_new_cpv

Type: Cookie

Duration: 1 (days)

Domain:

Purposes:

Store and/or access information on a device Measure advertising performance Measure content performance Refreshes Cookies: No

Name: exactag_new_gk

Type: Cookie

Duration: 60 (days)

Domain:

Purposes:

Store and/or access information on a device Measure advertising performance Measure content performance Refreshes Cookies: No

Name: exactag_new_uk

Type: Cookie

Duration: 180 (days)

Domain:

Purposes:

Store and/or access information on a device Measure advertising performance Measure content performance Refreshes Cookies: Yes

Name: exactag_new_user

Type: Cookie

Duration: 180 (days)

Domain:

Purposes:

Store and/or access information on a device Measure advertising performance Measure content performance Refreshes Cookies: Yes

Name: session_session

Type: Cookie

Duration: Uses session cookies

Domain:

Purposes:

Store and/or access information on a device Measure advertising performance Measure content performance Refreshes Cookies: No

Let me know if any additional information is needed.

  • damium@programming.dev
    link
    fedilink
    English
    arrow-up
    0
    ·
    6 months ago

    It’s not well explained for sure but judging by the names of the cookies I bet those store the consent (opt in/out) values for the other tracking options. Another way of putting it would be those are functional cookies related to the cookie consent form itself so that you don’t have to re-select consent options every time you visit the site.

    • Sunny' 🌻@slrpnk.netOP
      link
      fedilink
      arrow-up
      0
      ·
      6 months ago

      Ah indeed possible, I have seen some cookies with names such as “optout”, but this is not always the case. But does that mean people who DO NOT consent still get a cookie, but a different one without tracking and sorts…?

      • 9point6@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        6 months ago

        Yep exactly that, it’ll be a cookie (not a tracking cookie, which would require some kind of unique ID) that will be set to ensure the website doesn’t show their consent banner every time—i.e. remembering the results of your refusal of tracking consent.