Google.com cookies are added to the website domain

[RitendraS11]

Hi Everyone,

I was checking on my website and saw a weird issue.

What is in use on the website - ECID cookies are in-use and cookie management is done via OneTrust.

Problem statement: When a user navigates to the website and opts for essential cookies. Everything looks OK. Now, if the user opens a new tab on the same browser and launches url google.com, and tries to search for something. Some cookies for Google.com get created. I can see the same cookies getting reflected in my domain as well. Since the Google.com domain cookies are not categorized as essential cookies - they should not be reflected under the website's cookie list.

Google Cookies being created:

NID

Consent

OGPC

1P_JAR

AEC

Any pointers around this would be highly appreciated. Thanks!

__PRESENT

[Rudi-Shumpert]

Have you setup onetrust to also mange the google cookie management ?  

[RitendraS11]

Hi Rudi, 

Onetrust is used to categorize the cookies for the website. Google cookies are also categorized in Onetrust cookie categorization.

My query was specific to google.com cookies being shown under my website as a third-party cookie. If these cookies are not being created by my webpage, why it appear there? 

I don't know, what are you referring to with managing google cookie management? Can you explain it more?

Thanks!

[abhinavbalooni]

Hi @RitendraS11 

I think you should start with the category values being set in the One Trust OptAnonConsent cookie. Are they aligned with what the user selects in the cookie banner ?

There might be a discrepancy in the cookies categories being set.

Regards,

Abhinav

[NimashaJain]

@RitendraS11 Did you find the suggested solutions helpful? It would be great if you can  mark the answer as correct for posterity. If you have found out solution yourself, share it with wider audience in the community.

[RitendraS11]

@NimashaJain - The issue still lies and there is no solution identified. So, I can't accept any solution as "correct reply". If it gets resolved, I would post my solution in the ticket

[RitendraS11 · Accepted solution]

The website uses Google Recaptcha and hence, it allows browsers to have google.com cookies listed under their domain.

Also, third-party cookies are blocked by default in Firefox, Safari and Brave browsers. So, a similar issue is not there. The issue lies in the Google Chrome browser and EDGE browser.

To fix the issue - I have changed the script URL from www.google.com to www.recaptcha.net and it resolves the issue. 

<script src="https://www.google.com/recaptcha/api.js?hl=nl" async defer></script>

is replaced with - 

<script src="https://www.recaptcha.net/recaptcha/api.js?hl=nl" async defer></script>

Now, cookies are getting listed properly. Thanks, everyone for looking into this topic!

[NimashaJain]

Thanks @RitendraS11