This article looks at the cookies that will be stored by a web browser when a user visits and reads a publication. It has been broken down in to those that are core and those that are dependent on specific viewer functionality.
Updates will be made to this article as further information becomes available and specifically in relation to the "opt-in" process requirement for the EU ePrivacy Directive.
Core Cookies
Cookie Name | Storage Length | Usage |
JSESSIONID | Until browser is quit | Required for the publication / viewer to work for the user. |
ARPT_SERVICES | Until browser is quit | Used by the load balancer due to publications sitting on a cloud network. |
ARPT_STATS | Until browser is quit | Used by the load balancer |
zmagsLastVisit_{obfuscatedPublicationID} | 90 days | Logs visitor stats such as pageflips, visitor location but doesn’t store data that can be classed as PII (Personally Identifiable). |
ZmagsMobileVisitorID | 10 years | Logs visitor stats such as pageflips, visitor location when a publication is viewed on a mobile device. Doesn’t store data that can be classed as PII (Personally Identifiable). |
Functionality Dependent Cookies
Cookie Name | Storage Length | Usage |
SSOToken | Defined by publication owner | Part of the SSO (Single Sign-On) functionality that can be turned on. |
Password | 30 days | Storing the password for a publication if a password has been set on a viewer. |
RemoteAuthUsername | 30 days | Used if the “Remote Authentication” option is enabled on a viewer. |
RemoteAuthPassword | 30 days | Storing the password if “Remote Authentication” option is enabled on a viewer. |
serverVerifiedFixedPasswordCookie | 30 days | Used if a visitor selects “Remember me” on a publication that has a password-protected viewer. |
remoteAuthenticationCookie | 30 days | Stores the username / password if a publication has the “Remote Authentication” option set on the viewer. |
Comments
0 comments
Please sign in to leave a comment.