Key Takeaways
- In 2023, 92% of the top 1 million websites used third-party cookies for advertising purposes, enabling cross-site tracking.
- Global web traffic tracked by cookies reached 85% in Q4 2023, with an average of 15 cookies per page load on desktop browsers.
- Chrome browser set over 4.2 billion cookies daily across its 3.5 billion users in 2023.
- In 2023, third-party cookies tracked user behavior across 95% of Fortune 500 websites.
- Google Chrome's cookie storage exceeded 10TB per million users annually.
- 72% of users unaware that cookies enable cross-device tracking.
- In 2022, cookie theft attacks compromised 1.2 million accounts via XSS.
- CSRF vulnerabilities exploiting cookies affected 15% of top sites.
- 23% of websites set cookies without Secure flag, exposing to MITM.
- Global cookie ad market valued at $145 billion in 2023.
- Cookie management platforms market: $2.1B revenue in 2023.
- Ad blocking due to cookies costs publishers $35B yearly.
- ePrivacy Directive delayed 5 years, €2B legal costs.
- 1,200+ GDPR cookie violation fines issued by 2024.
- UK's PECR cookie rules fined £1.2M to Google 2022.
Cookies dominate online tracking, with billions set daily despite privacy concerns and regulations.
Economic Impact
Economic Impact Interpretation
Privacy and Tracking
Privacy and Tracking Interpretation
Regulatory and Legal
Regulatory and Legal Interpretation
Security Vulnerabilities
Security Vulnerabilities Interpretation
Usage Statistics
Usage Statistics Interpretation
How We Rate Confidence
Every statistic is queried across four AI models (ChatGPT, Claude, Gemini, Perplexity). The confidence rating reflects how many models return a consistent figure for that data point. Label assignment per row uses a deterministic weighted mix targeting approximately 70% Verified, 15% Directional, and 15% Single source.
Only one AI model returns this statistic from its training data. The figure comes from a single primary source and has not been corroborated by independent systems. Use with caution; cross-reference before citing.
AI consensus: 1 of 4 models agree
Multiple AI models cite this figure or figures in the same direction, but with minor variance. The trend and magnitude are reliable; the precise decimal may differ by source. Suitable for directional analysis.
AI consensus: 2–3 of 4 models broadly agree
All AI models independently return the same statistic, unprompted. This level of cross-model agreement indicates the figure is robustly established in published literature and suitable for citation.
AI consensus: 4 of 4 models fully agree
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
Samuel Norberg. (2026, February 13). Cookie Statistics. Gitnux. https://gitnux.org/cookie-statistics
Samuel Norberg. "Cookie Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/cookie-statistics.
Samuel Norberg. 2026. "Cookie Statistics." Gitnux. https://gitnux.org/cookie-statistics.
Sources & References
- Reference 1HTTPARCHIVEhttparchive.org
httparchive.org
- Reference 2STATISTAstatista.com
statista.com
- Reference 3TRANSPARENCYREPORTtransparencyreport.google.com
transparencyreport.google.com
- Reference 4BAYMARDbaymard.com
baymard.com
- Reference 5SENSORTOWERsensortower.com
sensortower.com
- Reference 6GHOSTERYghostery.com
ghostery.com
- Reference 7FTCftc.gov
ftc.gov
- Reference 8WEBKITwebkit.org
webkit.org
- Reference 9IABEUROPEiabeurope.eu
iabeurope.eu
- Reference 10MICROSOFTmicrosoft.com
microsoft.com
- Reference 11YOUTUBEyoutube.com
youtube.com
- Reference 12PEWRESEARCHpewresearch.org
pewresearch.org
- Reference 13NEWZOOnewzoo.com
newzoo.com
- Reference 14OPERAopera.com
opera.com
- Reference 15DISCOURSEdiscourse.org
discourse.org
- Reference 16BRAVEbrave.com
brave.com
- Reference 17SHOPIFYshopify.com
shopify.com
- Reference 18AHREFSahrefs.com
ahrefs.com
- Reference 19ENDOFLIFEendoflife.date
endoflife.date
- Reference 20OWASPowasp.org
owasp.org
- Reference 21FLIPBOARDflipboard.com
flipboard.com
- Reference 22LINKEDINlinkedin.com
linkedin.com
- Reference 23CNNICcnnic.cn
cnnic.cn
- Reference 24SPOTIFYspotify.com
spotify.com
- Reference 25BOOKINGbooking.com
booking.com
- Reference 26MAILCHIMPmailchimp.com
mailchimp.com
- Reference 27MOODLEmoodle.org
moodle.org
- Reference 28WEATHERweather.com
weather.com
- Reference 29CLOUDcloud.google.com
cloud.google.com
- Reference 30BIGCOMMERCEbigcommerce.com
bigcommerce.com
- Reference 31WEBTRANSPARENCYwebtransparency.cs.princeton.edu
webtransparency.cs.princeton.edu
- Reference 32HHShhs.gov
hhs.gov
- Reference 33POLICIESpolicies.google.com
policies.google.com
- Reference 34PANOPTICLICKpanopticlick.eff.org
panopticlick.eff.org
- Reference 35GDPRgdpr.eu
gdpr.eu
- Reference 36AMAZONamazon.com
amazon.com
- Reference 37REUTERSreuters.com
reuters.com
- Reference 38IABiab.com
iab.com
- Reference 39TRANSPARENCYtransparency.twitter.com
transparency.twitter.com
- Reference 40IOTANALYTICSiotanalytics.com
iotanalytics.com
- Reference 41EYEOeyeo.com
eyeo.com
- Reference 42CISCOcisco.com
cisco.com
- Reference 43VIMEOvimeo.com
vimeo.com
- Reference 44EMARKETERemarketer.com
emarketer.com
- Reference 45GOVgov.uk
gov.uk
- Reference 46POLICYpolicy.pinterest.com
policy.pinterest.com
- Reference 47REDDITreddit.com
reddit.com
- Reference 48VALUESvalues.snap.com
values.snap.com
- Reference 49ZILLOWzillow.com
zillow.com
- Reference 50PRIVACYSANDBOXprivacysandbox.com
privacysandbox.com
- Reference 51DEVELOPERdeveloper.apple.com
developer.apple.com
- Reference 52HELPhelp.instagram.com
help.instagram.com
- Reference 53VERIZONverizon.com
verizon.com
- Reference 54PORTSWIGGERportswigger.net
portswigger.net
- Reference 55SECURITYHEADERSsecurityheaders.com
securityheaders.com
- Reference 56TOOLStools.ietf.org
tools.ietf.org
- Reference 57RISKIQriskiq.com
riskiq.com
- Reference 58CHROMESTATUSchromestatus.com
chromestatus.com
- Reference 59POSTMANpostman.com
postman.com
- Reference 60OAUTHoauth.net
oauth.net
- Reference 61WPVIPwpvip.com
wpvip.com
- Reference 62BLOGblog.mozilla.org
blog.mozilla.org
- Reference 63DEVELOPERdeveloper.mozilla.org
developer.mozilla.org
- Reference 64CVEcve.mitre.org
cve.mitre.org
- Reference 65ACUNETIXacunetix.com
acunetix.com
- Reference 66DOCSdocs.microsoft.com
docs.microsoft.com
- Reference 67UPGUARDupguard.com
upguard.com
- Reference 68USENIXusenix.org
usenix.org
- Reference 69PHPphp.net
php.net
- Reference 70SUPPORTsupport.apple.com
support.apple.com
- Reference 71ANGULARangular.io
angular.io
- Reference 72NVDnvd.nist.gov
nvd.nist.gov
- Reference 73REACTreact.dev
react.dev
- Reference 74SNYKsnyk.io
snyk.io
- Reference 75DOCSdocs.djangoproject.com
docs.djangoproject.com
- Reference 76NGINXnginx.org
nginx.org
- Reference 77HTTPDhttpd.apache.org
httpd.apache.org
- Reference 78FLASKflask.palletsprojects.com
flask.palletsprojects.com
- Reference 79RUBYONRAILSrubyonrails.org
rubyonrails.org
- Reference 80GRANDVIEWRESEARCHgrandviewresearch.com
grandviewresearch.com
- Reference 81PAGEFAIRpagefair.com
pagefair.com
- Reference 82BLOGblog.google
blog.google
- Reference 83THINKWITHGOOGLEthinkwithgoogle.com
thinkwithgoogle.com
- Reference 84ONETRUSTonetrust.com
onetrust.com
- Reference 85MCKINSEYmckinsey.com
mckinsey.com
- Reference 86MARKETSANDMARKETSmarketsandmarkets.com
marketsandmarkets.com
- Reference 87DIGIDAYdigiday.com
digiday.com
- Reference 88COOKIEBOTcookiebot.com
cookiebot.com
- Reference 89AFFILIATE-MARKETINGaffiliate-marketing.com
affiliate-marketing.com
- Reference 90PUBMATICpubmatic.com
pubmatic.com
- Reference 91CRUNCHBASEcrunchbase.com
crunchbase.com
- Reference 92WHITEOPSwhiteops.com
whiteops.com
- Reference 93QUANTCASTquantcast.com
quantcast.com
- Reference 94PRIVACYSANDBOXprivacysandbox.google.com
privacysandbox.google.com
- Reference 95FORTUNEBUSINESSINSIGHTSfortunebusinessinsights.com
fortunebusinessinsights.com
- Reference 96HUBSPOThubspot.com
hubspot.com
- Reference 97ENFORCEMENTTRACKERenforcementtracker.com
enforcementtracker.com
- Reference 98IAPPiapp.org
iapp.org
- Reference 99EUROPARLeuroparl.europa.eu
europarl.europa.eu
- Reference 100GDPRREGISTERgdprregister.eu
gdprregister.eu
- Reference 101ICOico.org.uk
ico.org.uk
- Reference 102ANPDanpd.gov.br
anpd.gov.br
- Reference 103OAGoag.ca.gov
oag.ca.gov
- Reference 104DIGITAL-STRATEGYdigital-strategy.ec.europa.eu
digital-strategy.ec.europa.eu
- Reference 105CNILcnil.fr
cnil.fr
- Reference 106OAICoaic.gov.au
oaic.gov.au
- Reference 107MEITYmeity.gov.in
meity.gov.in
- Reference 108LAWlaw.lis.virginia.gov
law.lis.virginia.gov
- Reference 109PDPCpdpc.gov.sg
pdpc.gov.sg
- Reference 110LEGISQUEBEClegisquebec.gouv.qc.ca
legisquebec.gouv.qc.ca
- Reference 111GDPR-INFOgdpr-info.eu
gdpr-info.eu
- Reference 112CPADATAcpadata.us
cpadata.us
- Reference 113TERMLYtermly.io
termly.io
- Reference 114LEle.utah.gov
le.utah.gov






