Privacy policy: https://craftcms.com/privacy
| Cookie | Category | Purpose |
|---|---|---|
CRAFT_CSRF_TOKEN | Strictly necessary | Facilitates protection against cross-site request forgeries. This helps to safeguard data as it is submitted through forms on the website. |
CraftSessionId | Functional | Craft relies on PHP sessions to maintain sessions across web requests. That is done via the PHP session cookie. Craft names that cookie 'CraftSessionId' by default. This cookie will expire as soon as the session expires. |
Running CraftCMS on your site? A free Conzent scan shows which of these cookies are set before consent, and the banner blocks them until the visitor agrees.
Last updated 2026-09-27.