Cookies used by Sitecore

Abstract

An overview of cookies used by the Sitecore Experience Platform.

The Sitecore Experience Platform issues cookies to website visitors and client users. The following tables describe the purpose of each cookie and link to configuration options where applicable.

The following cookies can be issued to website visitors:

Cookie name

Description

Configuration options

sxa_site

Used by the Sitecore Experience Accelerator only. Stores the name of the context site.

Sample value: docsite

privacy-notification

Used by the Sitecore Experience Accelerator only. Expiry is set to 1 year.

Used by SXA privacy component.

Note

The privacy component only sets a cookie - it does not disable tracking or any other forms of processing if consent is revoked.

sc_test_combination

Used by the Experience Optimization feature to store information about the test variant used on the current page.

SC_ANALYTICS_GLOBAL_COOKIE

Sitecore's analytics cookie. Stores an ID that represents the device (issued by Sitecore) and a true/false value indicating whether visitor classification was guessed (robot or not robot). Used by the tracker to identify a returning contact. Only issued if tracking is enabled.

Sample value: 26c532a61c5247719cc8b68b0c41f7e4|False

Note

Customization is required to disable tracking on a per-visitor basis and prevent Sitecore from creating the cookie.

Configure cookie lifetime

ASP.NET_SessionId

The default ASP.NET session ID cookie.

Configured on the sessionState element in web.config.

__RequestVerificationToken

The default ASP.NET anti-XSRF cookie.

{website}#lang

Stores context language of the current site.

Sample value: docsite#en

The following cookies are issued to users of the Sitecore client interfaces (for example, the Experience Editor):

Cookie name

Description

.aspnet.cookies

Authentication cookie. Set for Sitecore client users if you use Sitecore.Owin.Authentication.

.aspnet.cookies.preview

Authentication cookie. Set for Sitecore client users in Preview mode if you use Sitecore.Owin.Authentication.

sc_rotated_simulator_id

Used by device preview mode.

sc_simulator_id

Used by device preview mode.

sc_date

sc_pview_shuser

sc_rte_shuser

scContentEditorFolder

scContentEditorFolderWidth

sitename#name

lang

fileDownloadToken{...}

messageLanguage

{website]#lang

{website}#sc_mode

{website}#sc_date

{website}#sc_debug

{website]#sc_mode

{website]#sc_prof

{website]#sc_rb

{website}#sc_ri

{website}#sc_trace

left

right

.ASPXAUTH

Default authentication cookie if you do not use Sitecore.Owin.Authentication.

sitecore_userticket

sitecore_starturl

__CSRFCOOKIE

sc_fv

sc_last_page_mode_command

experienceeditor_deviceId

sitecore_floatie_state

utcOffset