Does the __Secure-ROLLOUT_TOKEN cookie need consent?

In the EU and the UK, yes. __Secure-ROLLOUT_TOKEN is a marketing cookie and needs consent before it is set under the GDPR, the ePrivacy rules and PECR. Under the CCPA and CPRA, visitors can opt out of its use for cross-context behavioural advertising.

How long does the __Secure-ROLLOUT_TOKEN cookie last?

__Secure-ROLLOUT_TOKEN usually lasts 180 days. The exact lifetime depends on the site's settings and the version of the script that sets it.

Who sets the __Secure-ROLLOUT_TOKEN cookie?

__Secure-ROLLOUT_TOKEN is set by Youtube, from Google LLC. It is in the Marketing category.

How do I block or delete the __Secure-ROLLOUT_TOKEN cookie?

Visitors can delete __Secure-ROLLOUT_TOKEN in their browser's cookie settings. On your own website, a consent banner can keep the script that sets it waiting until the visitor accepts marketing cookies. Kukie.io's banner does this for known trackers by default, and for any other script you tag with its category.

Marketing

__Secure-ROLLOUT_TOKEN cookie

Set by Youtube.

What it does

Registers a unique ID to keep statistics of what videos from YouTube the user has seen.

Cookie name: __Secure-ROLLOUT_TOKEN
Category: Marketing
Provider: Youtube
Vendor: Google LLC
Duration: 180 days
Data source: Open Cookie Database (opens in a new tab)

Consent

Needed in the EU and the UK

__Secure-ROLLOUT_TOKEN is in the Marketing category. In the EU and the UK, it needs the visitor's consent before it is set. Under California's CCPA, visitors can opt out of the sale or sharing of their personal information, including for cross-context behavioural advertising.

GDPR and ePrivacy (EU): Prior consent is needed before setting __Secure-ROLLOUT_TOKEN. Advertising and tracking cookies are never covered by the strictly necessary exemption.
UK GDPR and PECR: Consent is needed before setting __Secure-ROLLOUT_TOKEN.
CCPA and CPRA (California): Setting __Secure-ROLLOUT_TOKEN for cross-context behavioural advertising counts as sharing personal information: offer a "Do Not Sell or Share My Personal Information" opt-out and honour the Global Privacy Control signal.

Managing __Secure-ROLLOUT_TOKEN with a consent banner

A consent banner can keep the script that sets __Secure-ROLLOUT_TOKEN waiting until the visitor accepts marketing cookies. Kukie.io's cookie scanner finds __Secure-ROLLOUT_TOKEN and sorts it into a category. The banner holds back known trackers by default, and any other script you tag with its category waits too.

Learn more about script blocking

Related cookies