Client Hub →
Theme
Glossary Data Privacy

Third-Party Cookies

Cookies placed by third-party domains to track user behaviour across multiple websites. Increasingly restricted by browsers and regulators.

Also known as: 3rd-party cookies tracking cookies cross-domain cookies third party tracking

What are Third-Party Cookies?

Third-party cookies are small data files placed on a user's browser by a domain other than the website they're currently visiting. For example, if an advertiser's tracking code appears on multiple publisher sites, that advertiser can set cookies across all those sites to build a profile of the user's browsing behaviour.

Unlike first-party cookies (set by the site you visit), third-party cookies enable tracking across the open web, making them powerful tools for audience targeting and measurement.

Why They Matter for UK Media Buyers

Historically, third-party cookies have been the backbone of programmatic advertising and digital marketing. They allowed agencies to:

  • Track users across publisher networks
  • Build detailed audience segments
  • Measure campaign performance across sites
  • Enable retargeting campaigns
  • Inform media planning with cross-site behavioural data

For UK agencies, this meant precise targeting and attribution that drove ROI for clients across sectors from e-commerce to financial services.

The Regulatory and Technical Shift

Third-party cookies face significant headwinds:

GDPR and UK ICO: Under UK data protection law, third-party tracking requires explicit user consent. The ICO has been increasingly active on cookie compliance, with enforcement action against major publishers and advertisers.

Browser Restrictions: Safari, Firefox, and now Google Chrome are phasing out third-party cookie support. Chrome's gradual deprecation (completed 2024) marks the end of an era.

Privacy-First Regulations: The ePrivacy Directive and UK implementations require clear consent mechanisms.

Current Landscape

While third-party cookies persist in some environments, UK media agencies must prepare for a cookieless future. This means:

  • Investing in first-party data strategies
  • Building owned audience lists
  • Adopting consent management platforms (CMPs)
  • Testing contextual and cohort-based targeting alternatives
  • Leveraging universal identifiers where compliant

Best Practice for Agencies

Ensure your media stack includes proper consent management, transparent privacy policies, and clear disclosure of tracking. Work with publishers and platforms that provide compliance documentation. Consider this a transition period – maintain third-party capabilities where compliant, but prioritise first-party data infrastructure investment.

Looking Ahead

The shift away from third-party cookies represents a fundamental change in how UK media agencies operate. Success requires proactive adaptation, strong compliance frameworks, and a focus on building direct relationships with audiences.

Frequently Asked Questions

Do I need consent to use third-party cookies under UK law?
Yes. Under GDPR and the Privacy and Electronic Communications Regulations (PECR), you must obtain explicit opt-in consent before placing third-party cookies on UK users' devices, except for strictly necessary cookies. Consent must be freely given and clearly informed.
Will third-party cookies disappear completely?
In major browsers like Chrome, yes – Google completed phase-out in 2024. However, some environments (email, walled gardens, certain ad networks) may retain limited third-party functionality. UK marketers should prepare for a predominantly first-party data environment.
What's the difference between first-party and third-party cookies?
First-party cookies are set by the site you're visiting and generally require less stringent consent. Third-party cookies are set by external domains (ad networks, analytics providers) to track users across multiple sites and typically require explicit consent under UK law.
How should UK agencies adapt their strategy?
Build first-party data strategies, implement compliant consent management, invest in contextual targeting, develop owned email lists, and explore cohort-based solutions like Google's Privacy Sandbox. Partner with vendors who prioritise compliance and transparency.

Learn How to Apply This

Need expert help?

Our team can put this knowledge to work for your brand.

Request Callback