[#957] Questions about injected cookies when using the rest API

Migrated from Redmine #957 | Author: Endre Gjeldsrud
Status: New | Priority: Normal | Created: 2022-11-08


Hi,

We have created our own frontend and we are currently using the REST API to talk with simplybook.me.

When browsing the booking page I see that we are receiving some cookies from simplybook.me. I’m wondering what is stored in these, and if there is any way to opt out of some of them?

The cookies in question are:
_pk_ref.8.31d8
_gcl_au
_pk_id.8.31d8
_gid (google analytics?!)
_ga (google analytics?!)
_fbp
PHPSESSID (guessing this is important since our serverless function authenticates with simplybookme, but still not sure why this is exposed to the browser..?)
cookies_accepted (it’s value is yes but I’ve never been prompted)

Are these all functional and necessary cookies? We are specifically not using GA on the rest of our site due to GDPR concerns, and now I see them popping up due to our integration..

Which are necessary? Can we opt out of using some of these? Of the necessary ones, what data is stored?

Endris

Endre Gjeldsrud wrote:

Wish I could close this myself.

Scratch that. I had a tab open on simplybook.me before I went into our booking page. There is no cookie injection anywhere. My bad!

Best regards,
Endris