This concept is intended for developers who want to learn more about the contents of Intershop's cookies.
All cookie configurations can be adjusted to meet the privacy and security needs of our customers.
The following table lists all cookies used in the standard product. Please note that customization of Intershop Commerce Management may extend this list. In addition, optional features such as Google Tag Manager may introduce additional cookies that are not part of this document.
Name | Cookie | Content | Description | No User-Related Content | Session | HostOnly | ReadOnly | Same-Site | Secure | Optional |
---|---|---|---|---|---|---|---|---|---|---|
Session Cookie | sid | hash |
| |||||||
Authentication Cookie | SecureSessionID-<site-id> | user ref |
| Contains reference to user Does not contain login/password/name of user/addresses | ||||||
Personalization Cookie | pgid-<site-name> | hash |
| Hash does not reference any user or user/customer group | ||||||
Basket Cookie | cc-<cart-id> | cart ref |
| Contains reference to cart Does not contain login/password/name of user/addresses | ||||||
A/B-Test Cookie | <configured-value>-<ab-test-id> | ab-test-group ref |
| Mandatory for feature | ||||||
Recently Viewed Items | rvdata-<domain?>-products | product refs | Mandatory for feature | |||||||
REST API Bridge | apiToken | cart or user ref |
| Contains reference to user Contains reference to cart | Mandatory for feature | |||||
Display Switch | cookie_test | nothing |
| Part of demo template Set CookiesDisabledOverlay.isml | ||||||
OpenID Connect State | oidc_state | actual OIDC state, organization name, identity provider ID |
| Contains reference to user's organization Does not contain login/password/name of user/addresses | Mandatory for feature |
The table contains the default values for cookies, see Guide - Secure URLs Only to use secure session and PGID cookies.
Cookies are intended to reference data in the application (database). Access to the database is limited.
Cookie Stored Reference to Object | Referenceable Data in Database |
---|---|
user | shipping, billing addresses, login, orders, customer |
cart | shipping, billing addresses |
a/b test group | list of users/customers |