Necessary

"csrf-canary" Cookie

Trustpilot

Description

These cookies are used by the TrustPilot service to identify you and enable you to leave reviews of our products and services.

Details

Cookie Name: csrf-canary
Category: Necessary
Service: Trustpilot
Duration: session
Data Source: Open cookie db

Consent Requirement

This cookie is classified as necessary and typically does not require consent. It is essential for basic website functionality.

Consent Requirements by Regulation

GDPR & ePrivacy (EU)

Exempt from prior consent under the strictly necessary exemption (ePrivacy Directive Article 5(3)), provided csrf-canary is genuinely required for the service the visitor requested. It must still be listed in your cookie policy.

UK GDPR & PECR

Exempt from consent under PECR Regulation 6(4) when strictly necessary. Disclosure in your cookie policy is still required.

CCPA/CPRA (California)

No opt-out is required for strictly necessary cookies, but csrf-canary must be disclosed in your privacy policy.

Managing csrf-canary with a Consent Banner

A consent management platform lists csrf-canary in the banner's cookie table under the necessary category. Because it is strictly necessary, it stays active without an opt-in, but disclosing it keeps your cookie policy accurate. Kukie.io's scanner detects it automatically and keeps the disclosure up to date as your site changes.

Frequently Asked Questions

Does the csrf-canary cookie require consent?

No. csrf-canary is classified as strictly necessary, so it can be set without prior consent under GDPR and PECR. It must still be listed in your cookie policy.

How long does the csrf-canary cookie last?

csrf-canary typically persists for session. The exact lifetime can vary with the site's configuration and the version of the script that sets it.

Who sets the csrf-canary cookie?

csrf-canary is set by Trustpilot. It is categorised as necessary.

How do I block or delete the csrf-canary cookie?

Visitors can delete csrf-canary at any time through their browser's cookie settings. Site owners can keep it blocked until consent with a consent management platform: Kukie.io's auto-blocking holds necessary cookies back until the visitor opts in.