Expand my Community achievements bar.

SOLVED

FPID - Cookie policy of 7 days??

Avatar

Community Advisor

Hi Adobe Team,

 

In this video https://youtu.be/s5RVWPeD0AA?t=201 its mentioned that any visitor returning after 7 days will be identified as a new visitor since the cookies will be deleted. I wanted to understand the rationale behind "7 days." Is this just a hypothetical number, or its some governing policy? Can you please share more info on this?

 

Ideally, we can set cookies (ECID specific) for 12 months, so in that case, how will this impact the return visitors issue? Trying to understand if it's really necessary to implement FPID.

 

CC: @woutervangeluwe , @bitunsen 

 

Thanks,

Chetanya

1 Accepted Solution

Avatar

Correct answer by
Employee

Hi @ChetanyaJain 

 

The 7 days mentioned in this webinar refers to Apple's ITP rules whereby all JavaSript-cookies are cleared after 7 days.

From https://webkit.org/tracking-prevention/:

7-Day Cap on All Script-Writeable Storage

Trackers executing script in the first-party context often make use of first-party storage to save and recall cross-site tracking information. Therefore, ITP deletes all cookies created in JavaScript and all other script-writeable storage after 7 days of no user interaction with the website. The latter storage forms are:

  • IndexedDB
  • LocalStorage
  • Media keys
  • SessionStorage
  • Service Worker registrations and cache

CNAME and Third-Party IP Address Cloaking Defense

ITP detects third-party CNAME cloaking and third-party IP address cloaking requests and caps the expiry of any cookies set in the HTTP response to 7 days.

 

By using and setting the FPID as a server-side HTTP Only cookie that is managed by your organisation directly, that 7 day ITP limit currently won't apply for the FPID, and as such, you'll have a more consistent visitor count and consistent customer profiles in RTCDP.

View solution in original post

2 Replies

Avatar

Correct answer by
Employee

Hi @ChetanyaJain 

 

The 7 days mentioned in this webinar refers to Apple's ITP rules whereby all JavaSript-cookies are cleared after 7 days.

From https://webkit.org/tracking-prevention/:

7-Day Cap on All Script-Writeable Storage

Trackers executing script in the first-party context often make use of first-party storage to save and recall cross-site tracking information. Therefore, ITP deletes all cookies created in JavaScript and all other script-writeable storage after 7 days of no user interaction with the website. The latter storage forms are:

  • IndexedDB
  • LocalStorage
  • Media keys
  • SessionStorage
  • Service Worker registrations and cache

CNAME and Third-Party IP Address Cloaking Defense

ITP detects third-party CNAME cloaking and third-party IP address cloaking requests and caps the expiry of any cookies set in the HTTP response to 7 days.

 

By using and setting the FPID as a server-side HTTP Only cookie that is managed by your organisation directly, that 7 day ITP limit currently won't apply for the FPID, and as such, you'll have a more consistent visitor count and consistent customer profiles in RTCDP.