Eväste

Eväste is the Finnish term for a web cookie, a small data file created by a website and stored on a user’s device. Cookies enable a site to remember information about the user or the session, such as login status, language preferences, or items in a shopping cart, so the user does not have to re-enter them on every visit.

A cookie typically contains a name, value, and metadata such as domain, path, and expiration date. When a user revisits the site, the browser sends the cookie back to the server, allowing the site to recognize the user and maintain state across requests. Cookies can be set by the domain the user visits (first-party) or by third-party services embedded on the page (third-party cookies), which is common for analytics and advertising.

Cookies are commonly categorized as session cookies, which are deleted when the browser is closed, and persistent cookies, which remain until their expiration date. They are used for authentication, personalization, analytics, and targeted advertising, among other purposes. While a cookie can improve usability, it also raises privacy concerns because cookies can be used to track user behavior across sites.

Security and privacy considerations include using HttpOnly and Secure flags, SameSite attributes, and avoiding storing sensitive data directly in cookies. Regulations such as the EU ePrivacy Directive and GDPR influence how cookies require user consent and data processing disclosures. Users can manage cookies through browser settings or consent banners, choosing to accept, block, or delete them.