Hi @anonymized-15502524,
Sometimes we are not able to identify the location/line number, which is why you will have to do some investigating to find the origin of the cookie.
Two of the cookies I am struggling with are: tk_ai (jetpack) and itsec-hb-login-a8a1c079ad3bdc3094da0ed2346efb84
I find it weird that the scanner was able to spot tk_ai, as Jetpacks description of it says:
Stores a randomly-generated anonymous ID. This is only used within the admin area and is used for general analytics tracking.
So this cookie should only be available in the admin area. However, we’ll look into it, as we are developing and integration for Jetpack.
As for itsec-hb-login, it is a necessary cookie so you don’t have to do anything additional.
Is the code example provided for Google Analytics on step 3 only for stats? Not marketing and preferences too?
The documentation on step 3 says:
To enable prior consent, apply the attribute “data-cookieconsent” to cookie-setting script tags on your website. Set the comma-separated value to one or more of the cookie categories “preferences”, “statistics” and “marketing” in accordance with the types of cookies being set by each script. Finally change the attribute “type” from “text/javascript” to “text/plain”.
So you can change “statistics” to “marketing”, or use a comma-seperated list, if you only want the script to be executed when both statistics and marketing are enabled. e.g: data-cookieconsent="statistics,marketing"
-
This reply was modified 7 years, 11 months ago by
cookiebot.
-
This reply was modified 7 years, 11 months ago by cookiebot.
Thread Starter
Anonymous User 15502524
(@anonymized-15502524)
Hi @cookiebot
Thanks for your reply.
I will keep an eye out for info about your integration with Jetpack. Re the itsec-hb-login cookie – my site does not allow visitors to login (it’s just me) so can I still mark this as a necessary cookie?
Any ideas on why I can’t manually add the CookieConsentBulkTicket cookie?
My question about the Google Analytics script was more whether that script sets marketing (eg collect) and preference (eg NID) cookies as well as stats cookies? Or are those cookies set by something else?
Thanks
@anonymized-15502524
CookieConsentBulkTicket should not be there, if you have not enabled the bulk consent feature. Maybe you’ve enabled it at some point of time to test, and our scanner picked it up? You can start a new scan under the “Cookies” tab and the scanner will update your cookie declaration with the most recent cookies it finds. Could you try that and let us know if CookieConsentBulkTicket is still detected?
My question about the Google Analytics script was more whether that script sets marketing (eg collect) and preference (eg NID) cookies as well as stats cookies? Or are those cookies set by something else?
This depends on your GA configuration. If you have enabled re-marketing, then GA should be categorized as “marketing”, if you haven’t, then “statistics” should suffice.
Thread Starter
Anonymous User 15502524
(@anonymized-15502524)
Hi
Thanks for your quick reply.
I’ve never enabled bulk consent as I only have one domain. Also I’ve run several scans and it comes up every time.
Re Google Analytics – I haven’t really set up any configuration – I don’t do ads or campaigns and my site is really basic. I am struggling with this a bit as my report shows the ‘collect’ cookie but I don’t seem to be able to control it with the plugin. Do you have any advice/can you sign post me to some straightforward Google Analytics guidance??
And it’s OK to categorise itsec-hb-login cookie as necessary?
Many thanks
@anonymized-15502524
We would need to know your domain name to check why CookieConsentBulkTicket is being set. Could you provide it here, or through our helpdesk? Pick one of the mails and include the URL for this thread.
You can categorize itsec-hb-login as necessary, no worries.
If you are not using GA for marketing purposes then you can categorize it as statistics, and change the categorization of the collect cookie to statistics as well 🙂
Thread Starter
Anonymous User 15502524
(@anonymized-15502524)
Hi @cookiebot
Thanks, I have just sent you my url to the accounts@ email.
I’m not actively using GA for marketing but I don’t know if my account is collecting any of that data. I thought the ‘collect’ cooke collected marketing info and it came up in my report…
Thanks
@anonymized-15502524
According to some of our friends here at WP, who have a large GA plugin, collect is used for statistics, and r/collect is used for marketing. Unfortunately Google does not provide such information, which is why we have categorized it as marketing. We will change this from our side soon, so for now you can change it manually.
We’ve checked your site, and it is a bug that CookieConsentBulkTicket is being shown in your report. However, it is not shown in your declaration (which you can check by pushing the “Show details” button on the banner, or your cookie-declaration page, if you’ve implemented it with cd.js).
We are investigating why CookieConsentBulkTicket is shown in your report and will fix it 🙂
Thread Starter
Anonymous User 15502524
(@anonymized-15502524)
Hi @cookiebot
Thanks I’ll run another report soon to see if it’s fixed.
Re the collect cookie, it is coming up as a stats cookie in my report (but it is also coming up as a new unidentified cookie) and it mentions marketing in the description so I wasn’t sure if it sent marketing info to GA anyway?
Thanks
Thread Starter
Anonymous User 15502524
(@anonymized-15502524)
If I think the script sets preference and stats cookies should the script start like this:
<script type=”text/plain” data-cookieconsent=”statistics” “preferences”>
Thanks
hi @anonymized-15502524
if you set collect to statistics you are good.
If I think the script sets preference and stats cookies should the script start like this:
<script type=”text/plain” data-cookieconsent=”statistics” “preferences”>
You should use a comma-seperated list instead:
<script type="text/plain" data-cookieconsent="preferences,statistics">
-
This reply was modified 7 years, 11 months ago by cookiebot.
Thread Starter
Anonymous User 15502524
(@anonymized-15502524)
Hi again!
Referring back to my earlier point re marketing cookies. When I look in the inspector I can see marketing cookies (APISID, HSID, SAPISID, SIDD etc) but these aren’t coming up in my scan report and I don’t know how to control them/where to edit scripts. Any ideas?
I also ran a scan on another tool (onetrust) and the marketing cookies show up there too.
Thanks
@anonymized-15502524
Referring back to my earlier point re marketing cookies. When I look in the inspector I can see marketing cookies (APISID, HSID, SAPISID, SIDD etc) but these aren’t coming up in my scan report and I don’t know how to control them/where to edit scripts. Any ideas?
Are these cookies 3rd party cookies that you have “dragged” along with you from other sites? Can you check which domain name they are set for ? You could check in Incognito mode, to see if the cookies are 1st party cookies.
If you can provide us a domain name, we can check.
-
This reply was modified 7 years, 11 months ago by cookiebot.
Thread Starter
Anonymous User 15502524
(@anonymized-15502524)
Hi there
I’ve cleared the cache and history so I thought that would stop any cookies being ‘dragged’ along but maybe I’m wrong? Also they are coming up in the OneTrust cookie scan. The domain is google.com.
I emailed my website’s domain name to to the accounts@ email on Tues 5 June, but will send again now just in case. I’ll also attach a screenshot of the cookies.
Thanks for your help.
Hi @anonymized-15502524
If you check in Incognito mode, the cookie cache will be cleared.
I just checked your website. Accepted all categories.
The only cookies I see are:
CookieConsent
_ga
_gat
_gid
