Skip to content
GDPR Fix logoGDPR Fix
FunctionalConsent required

What is the xs Cookie?

Set by Facebook Messenger (Chat Plugin) (Meta Platforms, Inc.). Expires after 90 days.

Purpose

Session token used by the Facebook Messenger Customer Chat Plugin to authenticate the logged-in user.

Set when the Facebook Messenger chat plugin is embedded on a page. Even if the user is not logged in to Facebook, loading the plugin sends data to Meta.

Cookie Details

Cookie Namexs
ServiceFacebook Messenger (Chat Plugin)
ProviderMeta Platforms, Inc.
CategoryFunctional
Duration90 days
Consent RequiredYes — requires explicit opt-in

Category: Functional

Functional cookies enhance the website's functionality and personalisation. They may be set by us or by third-party providers. Consent is required under GDPR.

GDPR Requirements

Under GDPR and the ePrivacy Directive, the xs cookie requires explicit user consent before it can be set. This means:

  • The cookie must not be set when a user first visits your site — not even for a fraction of a second
  • A consent banner must be displayed, and the user must actively accept analytics/marketing cookies
  • If the user rejects or ignores the banner, this cookie must remain blocked
  • The cookie must be listed in your cookie policy with its name, purpose, and retention period
  • Users must be able to withdraw consent at any time, which must also remove or invalidate this cookie

How to Handle This Cookie

  1. Block it by default — configure your Consent Management Platform (CMP) or tag manager to prevent Facebook Messenger (Chat Plugin) from loading until the user accepts functional cookies.
  2. Include it in your consent categories — map it to the "Functional" category in your CMP configuration.
  3. List it in your cookie policy — document the cookie name, purpose, provider (Meta Platforms, Inc.), and expiry (90 days).
  4. Sign a DPA — ensure you have a Data Processing Agreement with Meta Platforms, Inc. covering their use of data collected via this cookie.
  5. Verify it works — in an incognito browser, reject cookies and confirm xs is not set.

Other Facebook Messenger (Chat Plugin) Cookies

CookieCategoryDuration
c_userFunctional90 days
sbFunctional2 years
datrMarketing / Advertising2 years

Is this cookie on your website?

Scan your website to see every cookie it sets, whether they're blocked before consent, and get a full GDPR compliance report.

Scan your website free →