getsentry / sentry-docs

Sentry's documentation (and tools to build it)
https://docs.sentry.io
Other
332 stars 1.45k forks source link

Add documentation about how JavaScript SDK interacts with cookies/localstorage/sessionstorage #10659

Open AbhiPrasad opened 3 months ago

AbhiPrasad commented 3 months ago

Core or SDK?

Platform/SDK

Which part? Which one?

JavaScript SDKs

Description

We should better document how our sdks interact with cookies/localstorage/sessionstorage, as it's a frequent privacy concern for our users.

Suggested Solution

The basic gist is:

  1. no sdk ever sets cookies

  2. sdks may get cookies to attach to events as debugging context with opt-in integrations + sendDefaultPii true

https://docs.sentry.io/platforms/javascript/configuration/integrations/httpclient/ sends cookie data

  1. sdks use sessionstorage/localstorage with opt-in integrations to store data to power sdk functionality accordingly

Replay uses sessionstorage

Offline integration uses localstorage

getsantry[bot] commented 3 months ago

Routing to @getsentry/product-owners-sdks-web-frontend for triage ⏲️