Maximale cookielevensduur voor de vraag
Een identifier-cookie krijgt de maximale bewaartermijn die een browser aanvaardt, voordat de vraag is beantwoord.
- Familie
- Toestemming
- Status
- actief
- Geldt voor
- web
Wat er gebeurt
At page load, before any consent interaction, a cookie is placed with a lifetime at or near the ceiling the browser permits, currently 399 days in Chromium-based browsers.
Waarom het ertoe doet
The visitor is recognisable for over a year on the basis of a decision they were never given. Storage limitation requires a term tied to the purpose, not to the technical maximum.
Veelvoorkomende oorzaken
- default retention of the measurement setup left untouched
- cookie placed outside the consent gate, so the term was never considered
Dit is het níet
Setting an identifier before the question is answered is Tracking before consent whenever the recipient is a third party. This entry is the term rather than the moment, and it applies to a first-party identifier too: the fault is that the lifetime is the browser ceiling instead of something the purpose requires. Where both apply, cite both and say so; an operator can shorten the term without moving the tag, and can move the tag without shortening the term.
Hoe je het vaststelt
Indicator
A Set-Cookie with max-age at or above 34128000 seconds (399 days), or an equivalent Expires, issued before the consent event, whether by the site itself or by a third party. Record the ceiling the browser used at capture time, since it is a browser policy and not a constant.
Methode
network-with-identifier
Kwaliteit van de detectie
95 van 100
De grenzen van deze bevinding
Wat dit patroon zou weerleggen
- The cookie is strictly necessary for a service the visitor requested.met de hand te toetsende bevinding vervalt
- The lifetime is set by the browser, not by the server.machinaal te toetsende bevinding vervalt
Wat dit patroon níet vaststelt
- harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
- severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
- unlawfulness; that is for a supervisory authority or a court
- intent; a fault is usually a build decision, not a plan
- absence: not finding it in one capture is not evidence that it is not there
Reproduceren
- bookmarklet
repro/bookmarklet/before-consent.bookmarklet.txt - script
repro/web/check.mjsthe run reports DPE-2026-0004 as present, with the detail behind it
Ook zichtbaar met openbare scanners
Juridisch kader
Bepalingen
Rechtspraak
Veelgehoorde tegenwerpingen
399 days is the industry default.
A default is not a purpose. Storage limitation asks what term the purpose requires, and the browser ceiling is not an answer to that question.
Geldt wanneer
to-processing