Cookie Status: changes to browser tracking protections

Safari 27.2 stops capping cookies on CNAME-hosted sites

Mon, 26 Oct 2026 00:00:00 +0000

Cookies set by the response to a top-level navigation are no longer capped at 7 days when the site’s own hostname is a CNAME to another domain, such as a hosting provider. Source: WebKit Features for Safari 27.2

Safari 27 blocks identity resolution services

Mon, 14 Sep 2026 00:00:00 +0000

Cross-site requests to “ID graph” services, which link the same person across sites and devices, are blocked whenever “Prevent cross-site tracking” is on. Apple maintains the list of domains. Source: Blocking identity resolution infrastructure (WebKit blog)

Firefox 151 adds fingerprinting protection to Standard mode

Tue, 19 May 2026 00:00:00 +0000

Firefox limits how much information about the device and browser is revealed to sites in its default mode, not only in Strict mode. Source: Firefox 151 release notes

CHIPS returns in Safari 26.2

Mon, 01 Dec 2025 00:00:00 +0000

Partitioned cookies with the Partitioned attribute are supported again, after being removed in Safari 18.5 for further work. Source: WebKit Features in Safari 26.2

Google retires most Privacy Sandbox technologies (announced)

Fri, 17 Oct 2025 00:00:00 +0000

Topics, Protected Audience, Attribution Reporting, Related Website Sets and others are being phased out. CHIPS and FedCM stay. Source: Update on plans for Privacy Sandbox technologies

Firefox 141 supports partitioned cookies (CHIPS)

Tue, 22 Jul 2025 00:00:00 +0000

Third-party cookies can opt in to partitioning with the Partitioned attribute. Total Cookie Protection already partitions them, so this mainly helps developers write one cookie for all browsers. Source: Firefox 141 release notes

Chrome keeps third-party cookies (announced)

Tue, 22 Apr 2025 00:00:00 +0000

Google says Chrome will keep its current approach to third-party cookies and won’t add a separate prompt for users to choose. Third-party cookies stay enabled by default. Source: Next steps for Privacy Sandbox and tracking protections in Chrome

Safari 18.4 supports partitioned cookies (CHIPS)

Mon, 31 Mar 2025 00:00:00 +0000

Cookies set with the Partitioned attribute work in third-party context, kept separate for each top-level site. The feature was removed again in Safari 18.5 (May 2025) and returned in 26.2. Source: Safari 18.4 release notes

Google drops its plan to phase out third-party cookies (announced)

Mon, 22 Jul 2024 00:00:00 +0000

Instead of removing third-party cookies, Google proposes letting users make a choice in Chrome. The plan was itself dropped in April 2025. Source: A new path for Privacy Sandbox on the web

Chrome restricts third-party cookies for 1% of users (trial)

Thu, 04 Jan 2024 00:00:00 +0000

A test of “Tracking Protection” blocks third-party cookies by default for a random 1% of Chrome users. The test ended when Google changed course. Source: Google shares update on next step toward phasing out third-party cookies in Chrome

Chromium partitions third-party storage

Tue, 18 Jul 2023 00:00:00 +0000

From Chrome 115, storage, service workers and communication APIs in third-party frames are partitioned by top-level site, rolled out gradually. Edge has the same behavior. Source: Storage partitioning deprecation trial (Chrome for Developers)

Chrome 114 supports partitioned cookies (CHIPS)

Tue, 30 May 2023 00:00:00 +0000

Third-party cookies can opt in to partitioning with the Partitioned attribute. Edge 114 followed days later. Source: Cookies Having Independent Partitioned State (CHIPS)

Cookie lifetimes capped at 400 days

Tue, 02 Aug 2022 00:00:00 +0000

Chrome 104 limits the expiration of new cookies to 400 days, whether they’re set by script or by HTTP header. Edge applies the same cap. Source: Cookie Expires and Max-Age attributes now have upper limit (Chrome for Developers)

Total Cookie Protection on for all Firefox users

Tue, 14 Jun 2022 00:00:00 +0000

Firefox partitions cookies and other storage of every third party by top-level site in its default Standard mode. Source: Firefox rolls out Total Cookie Protection by default to all users worldwide

Brave skips known bounce trackers

Thu, 14 Oct 2021 00:00:00 +0000

With “debouncing”, Brave notices when a link goes through a known tracking domain and navigates straight to the destination (desktop 1.32). Source: Debouncing (Brave privacy updates)

Safari 15 hides the IP address from known trackers

Mon, 20 Sep 2021 00:00:00 +0000

Requests to known trackers no longer reveal the user’s IP address. Source: Safari 15 release notes

Brave announces ephemeral third-party storage (announced)

Mon, 01 Feb 2021 00:00:00 +0000

Instead of blocking storage in third-party frames, Brave gives each one a temporary partition that is cleared when the user leaves the site. It was turned on by default later in 2021. Source: Ephemeral third-party site storage (Brave privacy updates)

Firefox 85 partitions network state

Tue, 26 Jan 2021 00:00:00 +0000

The HTTP cache and other network state are kept separate for each top-level site, so “supercookies” stored there can’t track users across sites. Source: Firefox 85 release notes

Safari caps cookies from CNAME-cloaked subdomains

Thu, 12 Nov 2020 00:00:00 +0000

Cookies set by HTTP response from a subdomain that is a CNAME alias for a third party expire after 7 days at most. Source: CNAME cloaking and bounce tracking defense (WebKit blog)

Brave uncloaks CNAME trackers

Sun, 01 Nov 2020 00:00:00 +0000

Brave 1.17 resolves the DNS of each request and blocks it if a CNAME record points to a domain on its blocklists. Source: Brave 1.17.73 release

Chrome 86 partitions the HTTP cache

Tue, 06 Oct 2020 00:00:00 +0000

Cached files are stored separately for each top-level site, so a third party can’t use the cache to recognize the same browser on different sites. Source: Gaining security and privacy by partitioning the cache (Chrome for Developers)

WebKit's protections extend to all iOS browsers

Wed, 16 Sep 2020 00:00:00 +0000

With iOS 14, Intelligent Tracking Prevention applies to every browser and in-app browser on iOS, since they all use WebKit. Only the user can turn it off. Source: Tracking Prevention in WebKit

Chrome 85 trims the referrer by default

Tue, 25 Aug 2020 00:00:00 +0000

The default referrer policy becomes strict-origin-when-cross-origin, so other sites only see the origin of the referring page. Source: A new default Referrer-Policy for Chrome (Chrome for Developers)

Firefox 79 clears data from redirect trackers

Tue, 28 Jul 2020 00:00:00 +0000

Cookies and site data of known trackers are deleted daily unless the user has interacted with the site in the last 45 days. Source: Firefox 79 release notes

Safari blocks all third-party cookies

Tue, 24 Mar 2020 00:00:00 +0000

Safari 13.1 blocks third-party cookies for all domains, not only classified trackers, and caps all script-writable storage at 7 days of browser use without interaction. Source: Full third-party cookie blocking and more (WebKit blog)

New Edge ships with tracking prevention

Wed, 15 Jan 2020 00:00:00 +0000

The Chromium-based Edge 79 is released with tracking prevention set to Balanced by default. Source: Tracking prevention in Microsoft Edge

Firefox 72 blocks known fingerprinters

Tue, 07 Jan 2020 00:00:00 +0000

Requests to domains in Disconnect.me’s Fingerprinting category, when also listed as trackers, are blocked by default. Source: Firefox 72 release notes

Cookie Status launches

Thu, 21 Nov 2019 00:00:00 +0000

The site starts tracking how browsers handle cookies, storage and tracking by default.

Firefox 70 blocks social media trackers

Tue, 22 Oct 2019 00:00:00 +0000

Requests to the most common social media trackers are blocked by default. Source: Firefox 70 release notes

ITP 2.3

Mon, 23 Sep 2019 00:00:00 +0000

Script-writable storage is deleted after 7 days without interaction on sites reached via known trackers, and document.referrer is trimmed for them. Source: Intelligent Tracking Prevention 2.3 (WebKit blog)