Does the c_user cookie need consent?

In the EU and the UK, yes. c_user is a marketing cookie and needs consent before it is set under the GDPR, the ePrivacy rules and PECR. Under the CCPA and CPRA, visitors can opt out of its use for cross-context behavioural advertising.

How long does the c_user cookie last?

c_user usually lasts 1 year. The exact lifetime depends on the site's settings and the version of the script that sets it.

Who sets the c_user cookie?

c_user is set by Facebook. It is in the Marketing category.

How do I block or delete the c_user cookie?

Visitors can delete c_user in their browser's cookie settings. On your own website, a consent banner can keep the script that sets it waiting until the visitor accepts marketing cookies. Kukie.io's banner does this for known trackers by default, and for any other script you tag with its category.

Marketing

c_user cookie

Set by Facebook.

What it does

Facebook login user cookie.

Cookie name: c_user
Category: Marketing
Provider: Facebook
Duration: 1 year
Data source: Kukie.io

Consent

Needed in the EU and the UK

c_user is in the Marketing category. In the EU and the UK, it needs the visitor's consent before it is set. Under California's CCPA, visitors can opt out of the sale or sharing of their personal information, including for cross-context behavioural advertising.

GDPR and ePrivacy (EU): Prior consent is needed before setting c_user. Advertising and tracking cookies are never covered by the strictly necessary exemption.
UK GDPR and PECR: Consent is needed before setting c_user.
CCPA and CPRA (California): Setting c_user for cross-context behavioural advertising counts as sharing personal information: offer a "Do Not Sell or Share My Personal Information" opt-out and honour the Global Privacy Control signal.

Managing c_user with a consent banner

A consent banner can keep the script that sets c_user waiting until the visitor accepts marketing cookies. Kukie.io's cookie scanner finds c_user and sorts it into a category. The banner holds back known trackers by default, and any other script you tag with its category waits too.

Learn more about script blocking

Related cookies