HACKER Q&A
📣 jerrygoyal

Why Google cookies are exempted when blocking third-party cookies?


I disabled third-party cookies option in my chrome browser and yet cookies are being set from google.com and accounts.google.com domain to other sites like upwork.com.

see screenshot: https://i.imgur.com/zEm2r4Y.png

To see for yourself, disable third party cookies in chrome browser -> open upwork.com -> see cookies info.

As per my understanding third-party cookies are those created by domains other than the one the user is visiting at the time. So, why google.com domain cookies are being set on upwork.com?

Update: This issue doesn't happen in Firefox.


  👤 Animats Accepted Answer ✓
Because Google doesn't want you to do that.[1]

Use Firefox. The Web works just fine with all Google tracking blocked.

[1] https://fossbytes.com/chrome-doesnt-delete-google-cookies/


👤 livre
I can't provide an answer but I can provide a little more info about my tests.

I tried this in Microsoft Edge. They show up as blocked in that "Cookies in use" popup but when you open the inspector and go to the Application tab the cookies are there, not blocked. In Firefox's inspector in the Storage tab those domains don't show any cookies unless explicitly allowed.


👤 magicalist
when I open upwork.com it has 6 iframes in it, including to accounts.google.com/o/oauth2... I'd imagine that's where the cookie goes, not to the parent frame.

You'd need to see which request has the cookie on it, not just which ones were set "when you viewed this page".


👤 flowerlad
To reduce this kind of abuse I use Edge when visiting Google sites, and Chrome when visiting Microsoft sites.

👤 jakub_g
I don't know the details of the implementation, so I'm theorizing here, but the most important thing is not whether those cookies are set, but whether they can be read e.g. by other browser tabs and other origins. It could be that those cookies are temporarily set, in an isolated way, to avoid breaking things too much. IIRC, there are some heuristics in place and some cookies used for multi-domain Single-Sign-On are allowed (even in Firefox).

👤 martini333
Works as expected for me in Chrome 90 https://imgur.com/a/HDxsf5g

👤 maverick74
Why not use a Google Container?

https://addons.mozilla.org/en-US/firefox/addon/google-contai...

Oh... you are using Chrome!!! There's no point then. You won't be able to hide from Google no matter what you do!

Firefox + DuckDuckGo is just as good as all that "Googlish" things ;)


👤 tacker2000
If this bothers you, dont use Chrome, ever. Use Chromium if you really need it and dont want to use Firefox. And get rid of your google account whilst youre at it.

👤 vuelto
Not seeing that in Ubuntu Chromium. They actually get blocked in my case. Also Privacy Badger, cause why not... https://privacybadger.org/

👤 IshKebab
Probably because you are logged into Chrome.

👤 maverick74
For those who REALLY want Chromium-based browsers (Really?!?!?!?)...

Why not use Falkon (falkon.org)?


👤 retox
In Chrome you can disable auto-playing videos on any site except Youtube.

👤 unparagoned
Use brave if you also want the benefits if a chromium browser

👤 FractalHQ
Why no love for Brave around here?