Persistent cookies refer to any cookie that gets stored on a user’s browser and remains there until it expires. These cookies run in contrast to session-based cookies that self-delete when the user closes his/her browsing session. Persistent cookies are generally used to create more convenient browsing sessions for users, saving details like login information, preferences and settings.
Per the GDPR ePrivacy Directive, persistent cookies should last no longer than 12 months, at which point new consent must be gained from the user.
Persistent cookies make it easier for website owners to deliver functional, high-quality user experiences across browsing sessions. For example, websites that offer a “remember me” option for logins will use a persistent cookie to authenticate users every time they visit.
Broadly, persistent cookies enable many core website functions that today’s users expect, from saving login details to remembering basic layout preferences. For the user, these quality-of-life improvements save time and allow for seamless browsing. For the website owner, these cookies make it easier to create appealing experiences that reduce effort required from users.
Persistent cookies are a top area of focus for consent management. By nature, persistent cookies follow users and keep tabs on their behavior, creating concerns around user privacy and what information is being shared. Many types of persistent cookies fall under the “strictly necessary” exemption for consent collection, but others (like advertising cookies) are considered non-essential, and businesses must obtain explicit consent before using them.
On top of that, persistent cookies that store sensitive personal information—like logins or credit card information—may pose security risks to users. As such, persistent cookie policies are scrutinized heavily by privacy regulators.
Osman Husain
Osman is the content lead at Enzuzo. He has a background in data privacy management via a two-year role at ExpressVPN and extensive freelance work with cybersecurity and blockchain companies. Osman also holds an MBA from the Toronto Metropolitan University.