search

Lusito / forget-me-not

Make the browser forget website data, except for the data you want to keep.
zlib License
226 stars 25 forks source link

Exception possible for third party cookies? #158

Open bege10 opened 5 years ago

bege10 commented 5 years ago

Generally I want to block third party cookies, so I have checked that option. But there are a few sites like ebay.de that also use ebay.com cookies. How can I prevent that ebay.com cookies are deleted while ebay.de is active when the rule for ebay.de is forget?

Lusito commented 5 years ago

I'm not sure I get your use-case correctly. I'm guessing:

  1. You have the experimental "deny third-party cookies" option checked
  2. you are visiting ebay.de, which is configured as "forget".
  3. ebay.com cookies get denied since they are third-party cookies, but you don't want them to be removed.

Is this correct? That kind of behavior would be against what this checkbox stands for, so that's not possible at this moment. The only way to prevent these cookies from being removed is to either uncheck that checkbox or to add a "startup" or "never" rule for ebay.com.

bege10 commented 5 years ago

Thank you for your answer. You gess almost right but I don't use the experimental option. In f-m-n here is another option to delete third party cookies, saying delete third party cookies when created, additionally a time to wait before deleting. Could this be a starting point for a if-feature to delete third party cookies not if there is a specified domain open?

Lusito commented 5 years ago

That would be possible, but I don't think it will happen in the near future. At least not as long as I am alone on this project. But I'll leave this open as a feature request.

bege10 commented 5 years ago

Thank you for this great project and for leaving my request open.

pandark commented 3 years ago

I think I have a similar use case with Wikimedia projects authentication. It creates a cookie for each domain you have an account on, all at once (en.wikipedia.org, fr.wikipedia.org, en.wiktionary.org, etc.) so you don't have to log in each one separately. Maybe the idea would be to group some domains together and consider them as ("aliases" of) the same domain?