European Data Protection Board


Cookies, device fingerprinting and data logs

We use cookies, device fingerprinting and data logs for our website’s technical functioning and to create statistics.


A cookie is a small piece of data that a website stores on the visitor’s computer or mobile device.

First party cookies are set by the website. Only that website can read these cookies.  A website might also use an external service to analyse how people are using the site. Europa Analytics is the corporate analytics service used by the European Commission. It evaluates the efficiency of the EDPB website, hosted by the European Commission.

Europa Analytics sets its own cookie. The European Commission retains full control of the data collected through first-party cookies by storing the data in servers fully owned and controlled by the European Commission. The data is not be shared with any other organisation for marketing, market research or commercial purposes.

The first-party cookie contains the following information:

  • Random unique Visitor ID
  • Time of the first visit for the specific visitor
  • Time of the previous visit for the specific visitor
  • Number of visits for the specific visitor

Persistent cookies are saved on a device and are not deleted automatically when the browser is closed. For persistent cookies, a random ID is generated which allows Europa Analytics to identify when a user returns to the site.

All cookies expire after 13 months.

Device fingerprinting

Europa Analytics uses an IP de-identification mechanism that automatically masks a portion of each visitor's IP (Internet Protocol), effectively making it impossible to identify a particular Europa visitor via the sole IP address.

Device fingerprint is information collected about a remote computing device for the purpose of identification. These fingerprints can be used to identify individual users or devices even when cookies are turned off. The device fingerprint expires after 30 minutes. If, however, a user chooses to opt-out no device fingerprinting will be done.

Data logs

Logs are text files storing information on the server. The following logs are kept for analytics’ purposes unless the user chooses to opt-out.

  • IP address (masked), location, date and time and time in local visitor's time-zone;
  • Title, URL of the page being viewed and URL of the page that was viewed prior to the current page;
  • Information on the device used (screen resolution, desktop/tablet/mobile, brand, model, ..) and on the internet connection (page speed) ;
  • The operating system, the browser version, the plugins supported by the browser;
  • Site Search and files that were clicked and downloaded and links to external domains that were clicked;
  • Main language of the browser being used and language of the visited page.

Opting out

By default, the browsing experience is tracked by Europa Analytics, among things, to produce statistics. It is possible not to be tracked (opt-out) click here.

If you choose to opt-out, you will receive an opt-out cookie (piwik_ignore) so that your decision is remembered.

If you disable the cookies from the browser you cannot effectively opt-out because the piwik_ignore cookie cannot be saved. In this case, please see the Do not track preferences below.

Do not track preferences

‘Do not track’ allows visitors to opt out from being tracked by websites for any purpose including the use of analytics services, advertising networks and social platforms. 

If you enable do not track in your web browser, Europa Analytics will respect your choice; all visitors with a piwik_ignore cookie will not be tracked by Europa Analytics; Do not track’ does not work with Internet Explorer, please opt-out.

Restricted access to information

All analytics data communication is encrypted via HTTPS protocol. The analytical reports generated by Europa Analytics can only be accessed through the European Commission Authentication System (ECAS) by authorised Commission staff dealing with Piwik, the relevant European institution staff or by duly authorised external sub-contractors, who may be required to analyse, develop and/or regularly maintain certain sites.

Visitor logs

Europa Analytics automatically deletes visitors' logs after 13 months. Aggregated data are stored for an indefinite period by the European Commission for analysis purposes.


Specific questions about the storage and use of Europa Analytics data or requests for further information on EDPB’s cookie policy can be sent to our webmaster.