session cookies:

• hold no personally identifiable data - only a random number identifier used to index the server’s session cache and help the website to operate without any troubles
• by default, last for “a session” which starts when you launch a website (or web app) and ends when you leave the website or close your browser window - there is no timeout or expiration timestamp
• unlike other cookies, are stored in a temporary memory location (not on your device) which is deleted after the session ends (also known as “non-persistent”, “transient” and “temporary” cookies)
• are GDPR compliant as they fall under the categorization of ‘strictly necessary cookies’ and are therefore exempt from consent requirements under privacy regulations (like GDPR) - but information should be provided on what they do and why they’re necessary
   

persistent cookies:

• stored on a user’s device for a considerably longer time (also known as “permanent” cookies)
• can follow the user as they visit other websites
• recognize users and remember their browser settings or preferences on their subsequent visits and help websites to provide better user experiences

first-party cookies:

• placed on a user’s browser by the website or domain the user visits directly (e.g. session cookies)
• set for purposes like collecting analytics data, remembering browsing options (such as language or location) and carrying out other activities that improve the browsing experience of users
   

third-party cookies:

• issued by any party other than the website or a domain that a user visits directly
  e.g. embedded YouTube videos, Twitter posts, embedded Google maps, targeted adverts, or other services not provided by the website or domain directly

performance cookies:

• allow websites to provide an enhanced user experience by remembering the users
• evaluate the performance of a website by collecting information on how visitors use the website
   

functional cookies:

• ensure a website functions properly
  e.g. allow user registration, or remember username and password for automatic login, or remember a user’s site preferences (such as the language, colour, decoration, etc)
   

authentication cookies:

• a type of functional cookie used by web servers to authenticate that a user is logged in and with which account (e.g. online banking)
• allows users to move between pages without having to login again on every page
• authentication cookie data would usually be encrypted
   

analytics cookies:

• used to count the number of visitors on a website and track how users navigate and interact with a website
• help the website owners improve their website
   

advertisement cookies:

• used by websites to track the activities and behaviours of users online to provide them with personalized adverts (also known as “tracking” and “targeting” cookies)
• almost always persistent, third-party cookies
• the site with the advertising cookies does not always display the advertisements but use them to target users elsewhere, after they’ve left the site
  e.g. social media cookies placed on sites to track users around the web and provide ads to them on social media platforms