Cookies are everywhere – and I’m not talking about the yummy treats that call your name when you walk past a bakery. Digital cookies play an important role in streamlining your online experience, like storing login details and keeping track of your purchases, and aren’t dangerous by themselves. However, like many things, they can be misused by bad actors.
So, there’s no better time to learn more about cookies, what they do, and how you can clean them up to give your digital privacy a well-deserved boost. Ready? Let’s get started!
What are cookies?
Dipping a toe into the world of cybersecurity can be a daunting prospect. Where to begin? How do you navigate the complicated jargon? Cookies are pretty common (especially when we’re constantly pestered to accept them), making them a great place to start. So, let’s break down how they work and what they’re for.
Cookies (also known as web cookies, browser cookies, internet cookies, etc), are text files that contain a small amount of data. Think passwords, usernames, and the like. They’re transferred to your device when you access a site or service and used to identify specific users.
As I mentioned earlier, the job of most cookies is to make navigating the internet a lot easier. Here are a few of the things they do:
- Remember your password and username combo to make login processes quicker
- Recalls products in your cart, allowing you to rebuild it in a blink if you accidentally exit the page
- Keeps track of products you’ve previously purchased or viewed to suggest other stuff you might like
- Stores your preferences – including everything from your favorite sports team to your spoken language
Cooking by the book
International laws, such as GDPR and CCPA, require sites to ask for permission to serve and store cookies in your browser. Noncompliance can result in massive fines.
Honestly, I picture cookies as little ravioli that contain a small amount of information. The data is generated by the site you visit and labeled with an ID specific to you and the device(s) you’re using.
So, as the cookies change hands between your device and the site, it reads the ID, learns a little bit about you from the data stored within, and knows which relevant information to serve you.
Most cookies aren’t dangerous. They sit in the background, doing their thing, and are an important part of how the internet works. Some cookies, however, pose a risk to your privacy.
Are cookies dangerous?
So, the big question remains – should you accept cookies when prompted, or is the risk too great? The short answer is that you don’t have anything to worry about most of the time. The longer story? Well, it ultimately depends on the site you’re visiting, what’ll happen to your data once you’ve given your consent, and who has access to it.
First, it’s important to know the difference between first-party and third-party cookies:
- First-party cookies are created directly by a site or service. That means only that site or service can access the data stored within. Websites need these cookies to serve up your online requests, remember your preferences, and reduce friction during the browsing process.
- Third-party cookies aren’t generated by the site or service and usually come from elsewhere – like ads. Third-party cookies give advertisers and analytics companies a (sometimes invasive) window into your browsing history.
Data Privacy Week 2025
If you didn’t know already, now you do – it’s Data Privacy Week (January 27th to 31st)! The brainchild of the National Cybersecurity Alliance, it aims to arm you with everything you need to spot and avoid the biggest risks to your data privacy and “Take control of your data”.
Third-party cookies can be a godsend for bad actors, advertisers, and analytics firms, allowing them to keep tabs on your online activity. Then, they’ll be able to generate eerie targeted ads or share your information with other trackers.
Worse still, third-party cookies can provide hackers with the foothold they need to track you across the web, gain unauthorized access to your sessions, and pinpoint your identity. All they need to do is exfiltrate the tracking data within the cookie. Hackers then create detailed profiles about victims that can be used to propagate future cybercrimes – think phishing scams and identity theft.
How to clean up your cookies
While it’s possible to block and clear up cookies, there are a few things to keep in mind before you do. For a start, blitzing your cookies leads to some browsing frustration – you’ll have to log in to pages all over again and restate your preferences. However, the upside is that you’ll have firmed up your data privacy (and it’s generally a good idea to clean up your cookies a few times a year).
How to block cookies on Chrome
- Open up the Chrome browser and navigate to the Settings menu
- Select the “Privacy and security” tab, then “Site settings”
- Scroll down to “Third-party cookies”
- Here, you’ll be asked whether you want to block or allow third-party cookies
- Confirm your choice, and you’re all set
How to clear cookies on Chrome
- Again, navigate to the “Privacy and security” tab within the Settings menu
- Select “Delete browsing data”
- Next, select the time range and tick “Cookies and other site data”
- Hit “Clear data”
How to disable cookies on Safari
- Find the “Privacy” tab in the Settings menu
- Select the box next to “Block all cookies”
- Reboot the Safari browser
How to clear cookies on Safari
- In the Settings menu, find the “Privacy” tab
- Select “Manage website data”
- Next, you can manually select websites you’d like to remove cookies from
- Alternatively, select “Remove all” to erase all cookies
