Essential cookies (strictly necessary cookies) are cookies required for the basic functioning of a website. They are the only category that does not require user consent.
What are essential cookies?
Essential cookies enable the basic functions of a website without which the site could not operate properly. Users cannot reject them because doing so would prevent them from using the site.
Examples of essential cookies
- Session ID – Identifying a logged-in user
- Shopping basket – Remembering items in an online shop
- CSRF tokens – Protection against attacks
- Load balancing – Routing to the correct server
- Cookie consent – Remembering the consent choice
- Language preference – In certain cases
Why do they not require consent?
Under the ePrivacy Directive and the GDPR, these cookies are exempt from the consent requirement because they are "strictly necessary" for the provision of a service explicitly requested by the user.
Criteria for essential cookies
- The website would not function properly without them
- The user explicitly requests the service (login, basket)
- They are not used for marketing or analytics
- Data is not shared with third parties
Common mistakes
Beware of incorrectly classifying cookies as essential. Google Analytics, Facebook Pixel and chatbots are not essential cookies, even if the operator considers them important for business.