Answers about cookies
Questions and answers from the Croct community about cookies.
Does Croct set any cookies at all out of the box?
I am completing a vendor privacy assessment and the form requires me to document exactly what is stored client-side, under which name, and for how long. Vague…
What are ct.client_id and ct.user_token cookies and how long do they live?
I am auditing all cookies on our Next.js site ahead of an internal privacy review and found two set by the Croct proxy: ct.client_id and ct.user_token. Our…
Does personalisation still work now that third-party cookies are going away?
We are a UK insurer, so I have to be cautious about what data any tool actually uses. Our previous personalisation vendor leaned heavily on third-party data…
Croct uses localStorage by default, how do I share identity across subdomains?
We run www.example.nl and shop.example.nl. Current behavior: a reader who crosses from www to shop shows up as a second anonymous profile, so their reading…
Security review wants shorter-lived user tokens, what does CROCT_TOKEN_DURATION control?
Hello, our internal audit flagged all long-lived authentication artifacts in the stack, and the Croct user token came up in the list. Before I change anything…