Cookie Manager

In the EU, all websites must explicitly provide users with the opportunity to refuse the use of cookies.

This means that you are required to obtain consent from each visitor before storing or accessing information in a cookie – read more about the EU cookie legislation here.

To present a cookie compliance warning and comply with EU Law, you can use the Dynamicweb Cookie Manager:

  • Go to Settings > Web and Http
  • Click on the Cookie Manager node to open it (Figure 1.1)
Figure 1.1 The Cookie Manager

The Cookie Manager is disabled by default – to enable it click enable cookie manager. Once enabled, the Cookie Manager can render either template-based or custom cookie warnings, using JavaScript of .NET.

Below these settings, you can use the cookie deactivation lists (Figure 1.2) to mark some of your cookies as tracking cookies & secure cookies, by moving them to the Selected Cookies lists.

You can also add custom cookies to the solution, and set the cookie lifetime.

Please note:

  • Secure cookies only work on https enabled sites – this means that features which rely on cookies which are secure will not work when the context is http
  • All cookies saved through the Cookie Manager are HttpOnly by default – but you can disable this using the Disable HttpOnly cookies
Figure 1.2 Managing cookies

Disabling the Cookie Manager settings on specific websites

The template selected in the Cookie Manager settings are used on all websites in a solution – and cannot be fully disabled.

However, you can create an empty warning template and use it on the websites which should not display a cookie warning.

To do so:

  • Go to the Website settings
  • Click the Cookies-button in the ribbon bar
  • Select the empty template (or select Custom and don’t implement any custom code)

This de facto disables the Cookie Manager on that website.