Skip to main content

According to GDPR, do temporary session identifiers (Session IDs) require user consent?

Updated over 2 weeks ago

A temporary Session ID may require consent if it is stored as a cookie. However, regulators such as CNIL (France) and AEPD (Spain) have clarified that consent is not required if the Session ID meets certain strict conditions:

  • It is used exclusively for audience measurement.

  • It does not track users across different sites.

  • It does not persist beyond the browsing session.

  • It cannot be combined with other identifiers to re-identify the user.

Sealmetrics offers two options:

  1. Session ID mode β†’ Temporary Session IDs, compliant with CNIL/AEPD guidelines.

  2. Super-Privacy mode (Isolated Hits) β†’ No Session ID at all.

Did this answer your question?