Syllabus Lesson 14 of 156 · Cookies, properly explained
Cookies, properly explained

Quiz

Why it matters These questions ask you to read real-looking cookies and say who can see them. That is the skill that lets you judge any cookie list or banner. Retry as often as you like; nothing leaves your device.

Quick reminder

  • A cookie goes back only to the site that owns it, but a third party embedded on many sites sees its own cookie on all of them.
  • Secure: https only. HttpOnly: no scripts. SameSite: Strict, Lax or None for cross-site requests. Max-Age: lifetime in seconds. Domain: widens to subdomains. Path: part of a site.
  • Partitioned: a separate copy for each top-level site.
  • Other drawers: localStorage, sessionStorage, IndexedDB, cache, service workers.

Recap

  • Read the owner first, then SameSite, then the lifetime.
  • Long-lived, SameSite=None, unpartitioned and embedded everywhere is the shape of a tracking cookie.
  • Partitioning and blocking defeat the cross-site joining; clearing all site data removes the rest.

Spotted a problem in this lesson? Report it

Code · runs in your browser
Output

        

      

      
      

        Back