Back to Documentation

Cookie Categories

Organize and manage different types of cookies on your website

Overview

CookieConfig organizes cookies into four standard categories based on their purpose. This gives users granular control over what types of tracking they consent to.

The Four Cookie Categories

1. Strictly Necessary

Essential cookies required for the website to function properly. These cookies cannot be disabled.

Examples:

  • Session cookies for logged-in users
  • Shopping cart state for e-commerce sites
  • Security and authentication tokens
  • Load balancing cookies

Consent Required: No (but disclosure is recommended)

Default State: Always enabled

2. Functional

Cookies that enhance website functionality and user experience but are not strictly necessary.

Examples:

  • Language preference cookies
  • Font size and display settings
  • Video player volume settings
  • UI customization preferences

Consent Required: Yes (opt-in in strict jurisdictions, opt-out may be acceptable elsewhere)

Default State: Disabled until user opts in

3. Analytics

Cookies used to collect anonymous data about how visitors use your website.

Examples:

  • Google Analytics
  • Adobe Analytics
  • Heatmap tools (Hotjar, Crazy Egg)
  • Session recording tools
  • A/B testing platforms

Consent Required: Yes (opt-in required in most jurisdictions)

Default State: Disabled until user opts in

4. Marketing

Cookies used for advertising, retargeting, and tracking users across websites.

Examples:

  • Facebook Pixel
  • Google Ads remarketing
  • LinkedIn Insight Tag
  • Twitter conversion tracking
  • Third-party ad network cookies

Consent Required: Yes (always requires explicit opt-in)

Default State: Disabled until user opts in

Configuring Categories

Adding Scripts to Categories

In your dashboard, you can assign specific scripts or cookie domains to each category:

  1. Go to your website settings in the dashboard
  2. Navigate to "Cookie Categories"
  3. Select a category (Functional, Analytics, or Marketing)
  4. Add script URLs or cookie domain patterns
  5. Save your changes

Script Patterns

You can use patterns to match multiple scripts:

  • google-analytics.com - Blocks all Google Analytics scripts
  • googletagmanager.com - Blocks Google Tag Manager
  • facebook.net - Blocks Facebook tracking
  • *.doubleclick.net - Blocks all DoubleClick domains

Important

CookieConfig automatically detects and blocks common tracking scripts. However, you should review and verify that all third-party scripts on your website are properly categorized.

Best Practices

  • Be honest: Don't classify convenience features as "Necessary" just to avoid getting consent
  • Be specific: Provide clear descriptions of what each category does in plain language
  • Test thoroughly: Verify that scripts are actually blocked when users reject categories
  • Regular audits: Periodically review your categories as you add new third-party tools
  • Document your decisions: Keep records of why scripts are in each category for compliance purposes

Common Classification Questions

Where does YouTube belong?

Embedded YouTube videos should be in the Functional category if they're core content, or Marketing if they're promotional. Use YouTube's privacy-enhanced mode (youtube-nocookie.com) when possible.

What about Google Maps?

Google Maps is typically Functional if it's essential for your service (e.g., store locator), or Marketing if it's just nice to have.

Where do chatbots go?

Customer support chatbots are usually Functional. Marketing/sales chatbots should be in Marketing.

Related Documentation