Marketing

"xs" Cookie

Facebook

Description

Facebook session cookie.

Details

Cookie Name: xs
Category: Marketing
Service: Facebook
Duration: 1 year
Data Source: Manual

Consent Requirement

This cookie is classified as marketing/advertising. It requires explicit user consent under virtually all privacy regulations including GDPR, CCPA, and ePrivacy.

Consent Requirements by Regulation

GDPR & ePrivacy (EU)

Explicit prior consent is required before setting xs. Advertising and tracking cookies are never covered by the strictly necessary exemption.

UK GDPR & PECR

Explicit consent is required before setting xs.

CCPA/CPRA (California)

Setting xs for cross-context behavioural advertising is treated as sharing personal information: provide a "Do Not Sell or Share" opt-out and honour the Global Privacy Control signal.

Managing xs with a Consent Banner

A consent management platform keeps xs blocked until the visitor opts in to the marketing category. Kukie.io's scanner detects it automatically, categorises it, and the banner's auto-blocking holds back the script that sets it until consent is given - visitors who decline never receive it.

Frequently Asked Questions

Does the xs cookie require consent?

Yes. xs is a marketing cookie and requires explicit prior consent under GDPR, PECR, and the ePrivacy rules, plus a sale/share opt-out under CCPA/CPRA.

How long does the xs cookie last?

xs typically persists for 1 year. The exact lifetime can vary with the site's configuration and the version of the script that sets it.

Who sets the xs cookie?

xs is set by Facebook. It is categorised as marketing.

How do I block or delete the xs cookie?

Visitors can delete xs at any time through their browser's cookie settings. Site owners can keep it blocked until consent with a consent management platform: Kukie.io's auto-blocking holds marketing cookies back until the visitor opts in.