Cookie usage

This topic describes the cookies used by Episerver CMS.

How it works

Cookies are used for various types of website tracking, for example browser sessions.

Episerver CMS uses the following cookies:

Cookie Name	Purpose
ASP.NET_SessionId	Session cookie sent to the web browser. Used when you open the browser and then go to a website that implements ASP.NET session state. This cookie is deleted when you close your browser.
EPi:NumberOfVisits	Used if you are using the Number of Visits personalization criterion. This cookie is not set if you remove it from all of your visitor groups.
.EPiServerLogin, EPiDPCKEY, .ASPXRoles	Only used if you log in to a website. You should clearly state on the login page that cookies are used if you log in.
__epiXSRF & __RequestVerificationToken & __RequestVerificationToken	Used by our security components.
ImageEditorFileSize	Used by the Image Editor.
_utma, _utmb, _utmc, _utmz	Google Analytics cookies that are commonly used on Episerver websites. These third-party cookies are used to collect information about how visitors use the website.

According to EU directives, website owners are responsible for informing visitors about cookies used on the site. See Protecting Your Visitors’ Privacy According to EU Directive on Cookies.