Answers about cookies
Questions and answers from the Croct community about cookies.
Sharing the same visitor identity between our marketing site and app subdomain
Our marketing site runs on the apex domain and the product runs on an app subdomain, both Next apps. Right now a visitor who crosses from marketing to the app…
Does Croct rely on any third-party cookies to identify visitors?
we are auditing every script that touches visitor identity right now. Chrome's third-party cookie changes broke our previous tool's setup and I do not want to…
Does Croct set any cookies at all out of the box?
I am completing a vendor privacy assessment and the form requires me to document exactly what is stored client-side, under which name, and for how long. Vague…
What are ct.client_id and ct.user_token cookies and how long do they live?
I am auditing all cookies on our Next.js site ahead of an internal privacy review and found two set by the Croct proxy: ct.client_id and ct.user_token. Our…
Does personalisation still work now that third-party cookies are going away?
We are a UK insurer, so I have to be cautious about what data any tool actually uses. Our previous personalisation vendor leaned heavily on third-party data…
Croct uses localStorage by default, how do I share identity across subdomains?
We run www.example.nl and shop.example.nl. Current behavior: a reader who crosses from www to shop shows up as a second anonymous profile, so their reading…
Security review wants shorter-lived user tokens, what does CROCT_TOKEN_DURATION control?
Hello, our internal audit flagged all long-lived authentication artifacts in the stack, and the Croct user token came up in the list. Before I change anything…