Designing for Safari's Intelligent Tracking Prevention (ITP) Storage Boundaries
Learn how to architect web applications to survive Safari's Intelligent Tracking Prevention (ITP) by moving from JavaScript-set cookies to server-side state.
Loading…
ReadMeFeed / Community knowledge
#cookies
Real questions. Useful conversations. Find the people who know your stack.
Use Firefox Containers to Keep Work and Personal Logins Separate in One Window
Firefox Multi-Account Containers isolate cookies and storage per tab so you can sign into two accounts on the same site without switching profiles. Includes setup, verification, and limits.
firefoxHow Chrome’s SameSite=Lax Default Changes Cross‑Site Cookie Behavior
Chrome 80 made SameSite=Lax the default for cookies without an explicit attribute, blocking them in unsafe cross‑site POSTs. Learn how to detect the change, update cookies with SameSite=None; Secure, and verify the fix in DevTools.
chromeSafari ITP Limits Script-Set Third-Party Cookies to Seven Days
Safari's ITP can expire document.cookie values set in cross-site iframes after seven days. Diagnose it in Web Inspector and use server-issued cookies instead.
Should You Enable Total Cookie Protection in Firefox? A Decision Guide
Decide whether to enable Firefox’s Total Cookie Protection. Compare privacy, functionality, and performance in a clear table, then walk through enabling the feature and validating cookie isolation with Developer Tools.
Designing Cross-Site Features That Survive Safari's ITP Storage Partitioning
Safari's ITP partitions cookies and storage by top-level site, silently breaking embeds that assume a shared cookie jar. Here's the smallest architecture that survives it.
Choosing the Right SameSite Value for Cross-Site Cookies in Chrome
A decision guide for picking SameSite=Lax, Strict, or None for cross-site cookies in Chrome, with a comparison table, explicit Set-Cookie examples, and DevTools validation steps.
Safari's 7-Day Cookie Cap: Why Your Client-Side Sessions Keep Vanishing
Safari's ITP caps JavaScript-set cookies at 7 days, silently breaking analytics and sessions. Here's how the rule works, how to verify it, and why server-set cookies are the fix.
Diagnosing Safari Logouts and Lost State: An ITP Troubleshooting Guide
Safari‑only logouts and broken embeds usually trace to Intelligent Tracking Prevention. Diagnose which ITP mechanism is firing, then apply the matching fix—server‑set cookies, Storage Access API, or first‑party redirects.