6. Check your 'unclassified cookies'

Upon receiving your monthly scan report, we recommend to always check for unclassified cookies. These will be stated in the report as a separate category and will therefore be easily identifiable.

IMPORTANT: unclassified cookies are not blocked.

Unclassified cookies have not been given a purpose description yet, which makes it impossible for your website visitors to provide an informed consent.

In the context of GDPR compliance, all cookies except those strictly necessary to run the website, should be blocked until visitors has given consent. In order to ensure correct behavior and provide your users with full transparency, we urge you to update any unclassified cookies and make this a routine part of your recurring website maintenance. See 1. Make sure you have enabled ‘prior consent’ as well as What does ‘prior consent’ mean and how do I implement it?.

When using Automatic Cookie Blocking Mode, unclassified cookies will not be blocked automatically.

There are some exceptions to this rule: in some cases, unclassified cookies will be blocked automatically, but only if they are set in a script that also sets other cookies, that have been classified as statistics, marketing or preference. As the automatic blocker will hold back the already classified cookies, it will block the entire script and therefore, as a side effect, also block the unclassified cookie. This is however only possible when multiple cookies are set in 1 script. As a rule, unclassified cookies will not get blocked automatically and it is best to always add the classifications as soon as possible and ensure it will get blocked correctly.

If you are using Manual Cookie Blocking Mode, do remember to classify all your unclassified cookies first and mark up the cookie setting scripts manually after. See step 4 in the manual implementation guide: https://www.cookiebot.com/en/manual-implementation/

Why do I see unclassified cookies in the scan report?

If you see unclassified cookies in your scan report, it is because they are cookies and trackers that the Cookiebot scanner has identified on your website, but that are unknown to our cookie repository. We are constantly updating the cookie repository with additional cookies, classifications and purpose descriptions. However, since we need to reach out to third-party providers for this information and new cookies are created every day, the cookie repository is a constant work in progress.

How do I know what the unclassified cookies do?

You can manually classify the cookies and add the appropriate descriptions. In the scan report, you can see where in the source code the script setting the cookie is located - this will allow you to identify the unclassified cookies. If they are first-party cookies you may know what they do (and thereby the correct classification in 'strictly necessary', 'preferences', 'statistics' or 'marketing') and be able to add a purpose description in plain and easily understandable language. If you don't know it yourself, you can reach out to the web agency/developer who helped build your website. For third-party cookies you can reach out to the provider and seek information or try to search for information about that particular cookie.

If you have no idea what the purpose of an unclassified cookie is, then you can choose to mark it up as a marketing cookie - which is the most intrusive kind of cookie - just to be on the safe side.

How do I manually classify the cookies, then?

1. Log in to your account https://manage.cookiebot.com/goto/login
2. Go to the menu point ‘Cookies’ to see the cookies identified in the latest scan report (if you have multiple domains, select the relevant domain tab) 
3. On each unclassified cookie, choose the correct category from the drop-down menu, add the purpose description to the text field (and repeat for the different languages in use, if you have multiple languages). 
4. Save your settings (tick mark in the blue bar on the left-hand side)

The Cookiebot scanner will remember this in future scans.