What is the JSESSIONID cookie?no consent needed
Set by Java (Servlet) (The website (Java runtime)). Expires after Session.
Strictly necessary — it can load freely
Cookies essential to the service are exempt from consent under ePrivacy Art. 5(3) — but JSESSIONID must still be disclosed in your cookie policy.
Purpose
Session ID for Java web applications (Tomcat, Jetty, Spring and others).
Cookie details
- Cookie name
JSESSIONID- Service
- Java (Servlet)
- Provider
- The website (Java runtime)
- Category
- Strictly Necessary
- Duration
- Session
- Consent
- Not required
GDPR requirements
Strictly necessary cookies are essential for the website to function and cannot be switched off. They are set only in response to actions made by you — such as logging in or filling forms. No consent is required.
For JSESSIONID to be compliant, it must be:
- May be set as soon as the visitor arrives — no consent needed
- Still disclosed in your cookie policy, with what it does and why it is necessary
- Not shown as a toggle in your consent banner
How to handle it
- 1Let it load freely
No consent gate is needed for this cookie.
- 2Disclose it
List it in your cookie policy as strictly necessary for Java (Servlet).
- 3Keep it out of the toggles
Strictly necessary cookies shouldn't be switchable in your consent UI.
is JSESSIONID on your site?scan it in 2 minutes
Free scan · see every cookie before and after consent