Cookies in first-party context
Are the site's own cookies deleted or capped?
First-party cookies belong to the site in the address bar. They keep users signed in, remember shopping carts, and hold the identifiers that analytics tools use to recognize returning visitors.
Trackers can use them too. A tracker that can’t use third-party cookies can add an identifier to the links it controls (
link decorationLink decoration The act of adding URL query string parameters (e.g. https://www.domain.com?id=12345 or hash fragments (e.g. https://www.domain.com/#id=12345) to outbound links from a website with the purpose of passing some key-value pairs from first-party …) and have its script store that identifier in a first-party cookie on the destination site. To limit this, some browsers shorten the lifetime of first-party cookies, especially those set with JavaScript (document.cookie) rather than an HTTP Set-Cookie header.
All Chromium-based browsers cap every cookie at 400 days. Safari and Brave go further.
By browser
Brave
Limited- Maximum expiry of about 6 months, for cookies set with both
document.cookieandSet-Cookie. New
Sources (1) · 2026-10-30
- Cookie Status test, Brave 1.97
Chrome
Limited- Cookies restricted to a maximum lifetime of 400 days.
Sources (1) · 2026-10-31
- Cookie Status test, 2026-10-31
Edge
Limited- Cookies restricted to a maximum lifetime of 400 days. New
Sources (1) · 2026-10-30
- Cookie Status test, Edge 155
Firefox
Limited- All storage is purged from known trackers daily, unless the user has interacted with the site in first-party context within the last 45 days.
Safari
Limited- For cookies set with
document.cookie, deletion happens after 7 days of browser use without user interaction on the site. - For cookies set with
document.cookie, expiration set to 24 hours on pages with URL decoration (query parameters or fragments) when referring domain is a known tracker. - If ITP classifies a domain as a tracker and the user hasn’t interacted with it as a first party in 30 days of browser use, all its site data is deleted, including cookies set with
Set-Cookie. New
Sources (1)
History
Firefox 79 clears data from redirect trackers
Cookies and site data of known trackers are deleted daily unless the user has interacted with the site in the last 45 days.
ITP 2.2
Cookies set by script on pages reached from a known tracker with link decoration expire after 24 hours.