Skip to main content

cookie-consent

obtain and store consent before activating analytics

Cookies banner best practices to avoid GDPR & CCPA fines

  • privacy laws
  • the cookies you use can be categorized by their function and legal status.

Here are the most common cookies you'll find in an e-commerce Angular web app, broken down by category:

1. Strictly Necessary/Essential Cookies​

These cookies are fundamental for the website's core functionality. They do not require explicit user consent, but you must still disclose their use in your privacy policy.

  • Session ID Cookie: This is arguably the most essential cookie. It's a temporary cookie that uniquely identifies a user's session. It allows the server to recognize the user as they navigate from page to page. Without it, a user couldn't stay logged in or add multiple items to a shopping cart during a single visit.

    • Purpose: User authentication, session management, and shopping cart functionality.

  • Authentication Cookie: This cookie is set when a user logs in. It contains a unique, randomly generated token that allows the user to remain logged in as they browse the site. This cookie is what enables the "Remember me on this device" functionality.

    • Purpose: Keeping the user logged in across multiple pages and sessions.

  • Security Cookies: These cookies are used to detect and prevent security threats and fraud, such as multiple failed login attempts from a single IP address.

    • Purpose: Security and fraud prevention.

2. Functionality Cookies​

These cookies remember user preferences to enhance the user experience. They are often considered "essential" for a good user experience and may not require explicit consent in all jurisdictions, but transparency is key.

  • User Preferences Cookie: Stores a user's preferences, such as language, currency, font size, or display settings.

    • Purpose: Personalizing the user's shopping experience.

  • Shopping Cart Persistence Cookie: While a session cookie manages the cart for a single session, a persistent cookie may be used to save items in the cart between visits (e.g., if a user closes their browser and comes back the next day).

    • Purpose: Remembering items in the cart for future sessions.

3. Performance/Analytics Cookies​

These cookies are used to collect data on how users interact with the website. They are not essential for the site's basic function and therefore require user consent under laws like the GDPR.

  • Google Analytics Cookies (_ga, _gid, etc.): These are the most common analytics cookies. They collect anonymized data on user behavior, such as which pages were visited, the time spent on each page, and how users found the site.

    • Purpose: Measuring website traffic, user engagement, and performance.

  • Hotjar, HubSpot, or other analytics tools: Other analytics services use their own set of cookies to track user behavior, such as heatmaps, session recordings, and form analytics.

    • Purpose: Gaining insights into user behavior to optimize the website.

4. Targeting/Advertising Cookies (Third-Party Cookies)​

These cookies are the most controversial and often require explicit, opt-in consent from the user. They are typically set by third-party advertising partners and are used to track a user's browsing activity across different websites.

  • Retargeting Cookies: Used to serve targeted ads to users who have previously visited the website. For example, if a user viewed a product but didn't buy it, a retargeting cookie might be used to show them an ad for that same product on another website.

    • Purpose: Retargeting and advertising.

  • Social Media Buttons: Embedded social media "share" or "like" buttons can set cookies that track a user's browsing history to build a profile for advertising purposes.

    • Purpose: Social media integration and targeted advertising.

  • Affiliate Cookies: Used to track when a user comes from an affiliate link to properly credit the affiliate for a sale.

    • Purpose: Affiliate tracking.

The Developer's Responsibility​

As the developer, you are responsible for ensuring your Angular app handles these cookies correctly and transparently. This means:

  1. Implementing a Cookie Consent Banner: You must have a consent management platform (CMP) that categorizes the cookies and allows users to opt-in or opt-out of non-essential cookies. For an e-commerce site, the banner must be GDPR and CCPA compliant.

  2. Disclosure in Privacy Policy: All these cookies must be clearly listed and explained in your Privacy Policy.

  3. Client-Side Management: You'll use an Angular package (like ngx-cookie-service) to manage these cookies on the client side, setting and retrieving them securely.

By categorizing and managing cookies this way, you ensure your application is legally compliant, secure, and respectful of user privacy.

Regulatory and societal trends for cookie compliance and consent management

https://www.onetrust.com/products/cookie-consent/

Do Not Sell or Share My Personal Data​

The California Privacy Rights Act permits California residents to opt out of the "selling" or "sharing" of their personal information. When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. The cookies we use on our site collect information that might relate to you, your preferences, or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. We also may use cookies or other tracking technologies to recognize you and collect information about your activity on our sites. To opt-out of the transfer of your personal information to third parties for targeted advertising purposes using these technologies, turn off "Advertising Cookies" below. Your selection is specific to the device, website, and browser you are using. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website and to monitor its performance. Our Privacy Policy contains more information about our data collection practices.

Strictly Necessary Cookies​

Always Active

These are Cookies that are required for the operation of our website including performance and analytics.

  • Functionality Cookies​

    Always Active

    These Cookies are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Analytical/Performance Cookies​

These allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

Advertising Cookies​

These Cookies record your visit to our website, the pages you have visited and the links you have followed. We may use this information to display advertising to you on other websites, including Social Media. We may also share this information with third parties for this purpose.

  • Social Media Cookies​

    These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit.    If you do not allow these cookies you may not be able to use or see these sharing tools.

tabnine

tabnine