What is the SID cookie?it needs consent first
Set by Google (Google LLC). Expires after 2 years.
Block it until the visitor opts in
Under the ePrivacy Directive (Art. 5(3)) and GDPR, SID may only be set after the visitor accepts marketing cookies.
Purpose
Signed-in Google account identifier, sent with requests to Google domains — including from Google embeds (YouTube, Maps, reCAPTCHA) on other sites.
Set on google.com, not on your domain. It shows up in a scan when a Google embed loads before consent.
Cookie details
- Cookie name
SID- Service
- Provider
- Google LLC
- Category
- Marketing / Advertising
- Duration
- 2 years
- Consent
- Required — opt-in
GDPR requirements
Marketing cookies are used to track visitors across websites to display relevant advertisements. Consent is required under GDPR.
For SID to be compliant, it must be:
- Not set on the first visit — not even for a fraction of a second
- A consent banner is shown, and the visitor actively accepts marketing cookies
- Stays blocked if the visitor rejects or ignores the banner
- Listed in your cookie policy with its name, purpose and retention period
- Removed or invalidated when the visitor withdraws consent
How to handle it
- 1Block it by default
Configure your consent platform (CMP) or tag manager so Google doesn't load until the visitor accepts marketing cookies.
- 2Map it to a consent category
Put it under “Marketing / Advertising” in your CMP configuration.
- 3List it in your cookie policy
Name, purpose, provider (Google LLC) and expiry (2 years).
- 4Sign a DPA
Have a Data Processing Agreement with Google LLC covering the data this cookie collects.
- 5Verify it works
In a private window, reject cookies and confirm
SIDis not set.
Other Google cookies
NIDCONSENTSOCSAEC1P_JARSAPISIDAPISID__Secure-3PSIDHSIDSSID__Secure-3PAPISID__Secure-3PSIDCCis SID on your site?scan it in 2 minutes
Free scan · see every cookie before and after consent