Title: Cookie Author: Kriko Published: Feb 4, 2021 Last modified: Jul 15, 2026 --- 1. [Home](https://kriko.io/) / 2. [Glossary](https://kriko.io/glossary) / 3. C Letter # Cookie A **cookie** is a small piece of [data](https://kriko.io/services/data-analysis-insight) that a web server sends to a user's browser and that the browser can store. On later visits, the browser can send these cookies back to the relevant server. This structure allows websites to remember user sessions, store preferences, keep state information such as shopping carts and, in some cases, analyse user behaviour. MDN Web Docs explains cookies as small pieces of [data](https://kriko.io/services/data-analysis-insight) that help web applications store limited amounts of information and remember state in the otherwise stateless HTTP protocol. Cookies are often described as "text files stored on the computer," but technically they are [data](https://kriko.io/services/data-analysis-insight) records managed by the browser. The same cookies are not sent to the entire internet whenever a user visits a website; cookies work according to domain, path, duration, security and access settings. A cookie can only be used for the relevant domain or defined scope. For this reason, saying that cookies simply "track users" is not enough to understand how they work; the purpose, scope, duration and source of the cookie also matter. One of the most common uses of cookies is session management. For example, when you log in to an e-commerce website, a session cookie may be placed in your browser. This cookie allows the website to understand that you are a logged-in user as you move between pages. The "remember me" option usually works through a secure session token or similar authentication structure rather than storing the username and password in plain text. For this reason, secure [cookie management](https://kriko.io/services/cookie-consent-management) is critical for user account security. Cookies can also be used to remember user preferences. Language selection, currency, theme preference, region selection, form preferences or products in the shopping cart can be preserved through cookies or similar storage technologies. This allows the user to avoid setting the same preferences again when they revisit the site. These types of cookies make the user experience easier and help the website function more effectively. In marketing and advertising, cookies can be used to understand user behaviour and create more relevant advertising experiences. For example, if a user visits certain product pages, adds products to the cart or shows interest in a specific category, these signals may be used in remarketing or personalized advertising campaigns. However, this type of use is more sensitive in terms of user privacy and [data](https://kriko.io/services/data-analysis-insight) protection rules. Therefore, for advertising, targeting and personalization cookies, clear information and valid consent processes should be properly structured when required. Cookies can be classified in different ways. By duration, there are session cookies and persistent cookies. Session cookies are usually deleted when the browser is closed, while persistent cookies may remain on the device for a defined period. By source, there are first-party cookies and third-party cookies. First-party cookies are placed by the website the user visits, while third-party cookies may be placed by advertising, analytics, social media or other service providers. By purpose, cookies may be classified as strictly necessary, performance, functional, analytics, advertising and targeting cookies. Strictly necessary cookies may be required for a website to perform its basic functions. Session security, shopping cart functionality, checkout steps or storing the user's cookie preference may fall into this category. In contrast, analytics, advertising, remarketing or behavioural targeting cookies should be evaluated separately because they can process user behaviour in more detail. The Turkish Personal [Data](https://kriko.io/services/data-analysis-insight) Protection Authority's Cookie Practices Guide is an important source for website operators that process personal [data](https://kriko.io/services/data-analysis-insight) through cookies, as it evaluates scenarios where explicit consent is or is not required. If a website uses cookies, it is important to prepare a cookie policy or cookie notice. This text should clearly explain which cookies are used, for what purposes they are processed, how long they are stored, whether they are first-party or third- party cookies, the legal basis for processing and how users can manage their cookie preferences. It is not enough for the text to consist only of legal terminology. Users should be able to easily understand which [data](https://kriko.io/services/data-analysis-insight) is processed and for what purpose. [Cookie management](https://kriko.io/services/cookie-consent-management) is not limited to publishing a policy text. The cookies used on the website should be technically inventoried, cookie categories should be identified correctly, consent mechanisms should be set up for non-essential cookies when required and users should be given the ability to change their preferences. If a user selects "reject," advertising or analytics cookies should not continue running. Similarly, using misleading designs in cookie banners, pressuring users to accept or making preference management unnecessarily difficult can create trust and compliance issues. When not misused, cookies can be beneficial for both users and website owners. For users, they provide advantages such as faster login, a more personalized experience, preserved shopping carts and remembered preferences. For website owners, they offer opportunities to improve user experience, understand technical performance, analyse the conversion funnel and manage marketing activities more efficiently. However, these benefits are not sustainable without transparency and user control. Users can delete, block or manage cookies for specific sites through browser settings. Browsers such as Chrome, Firefox, Safari and Edge provide options to clear cookies and site data. However, deleting cookies may log users out of some websites, empty shopping carts or reset preferences. Therefore, users should also understand the effect that clearing cookies may have on their web experience. From a security perspective, cookies should be configured correctly. For cookies related to sessions or authentication, security attributes such as `Secure`, `HttpOnly` and `SameSite` can be used. `Secure` helps ensure that the cookie is transmitted only over HTTPS. `HttpOnly` can reduce certain attack risks by limiting JavaScript access. `SameSite` helps control how the cookie is sent in cross-site requests. These settings are especially important for user accounts and payment processes. In summary, **cookies** are small pieces of [data](https://kriko.io/services/data-analysis-insight) that help websites remember user sessions, preferences, shopping cart information and certain behavioural signals. They can improve user experience, simplify e-commerce flows and support marketing measurement. However, cookie use should be managed carefully from technical, legal and ethical perspectives. A proper cookie policy, clear notice, valid consent mechanism, secure technical configuration and the ability for users to manage their preferences are the core elements of healthy cookie management. ## Discover it in the dictionary ### Evergreen Content Evergreen Content refers to content that remains valuable and relevant for a long period after it is published. It is not tied to a… ### Business to Consumer (B2C) Business to Consumer, commonly abbreviated as B2C, is a business model in which companies offer their products or services directly to end consumers. In… ### Data Literacy Data literacy is defined on Wikipedia as the ability to read, work with, analyse and discuss data. More broadly, it refers to the ability… ### Simple Mail Transfer Protocol (SMTP) SMTP, short for Simple Mail Transfer Protocol, is an application-layer protocol used to send emails and transfer them between mail servers. In simple terms,… ### Customer Journey Map A Customer Journey Map is an analytical tool that visually and systematically shows all the stages in which a customer interacts with a brand,… ### Schema (schema.org) Schema is a structured data markup system, commonly used through the schema.org vocabulary, that helps search engines better understand the content on web pages.… ### Conversion Rate Conversion Rate, commonly abbreviated as CR, is a performance metric that shows the percentage of users who complete a target action on a website,… ### SEO-Friendly Content SEO-friendly content refers to website content prepared in a way that aligns with both user search intent and search engine evaluation criteria. SEO stands… ### Data Security Data security refers to the protection of data against risks such as unauthorised access, use, modification, disclosure, loss or destruction. Its primary objective is… ## Track the digital heartbeat with Kriko Subscribe to receive curated insights, news, and ideas shaping the digital landscape. By checking this box, you acknowledge and accept our [privacy policy](https://kriko.io/privacy-policy).