WebmasterID logoWebmasterID
Privacy & compliance

Partitioned cookies (CHIPS) in depth

Partitioned cookies, standardised as CHIPS (Cookies Having Independent Partitioned State), let a cookie opt into per-top-level-site storage with the Partitioned attribute. A cookie set by an embedded third party is then stored under a partition key tied to the top-level site, so the same third party cannot read it across different sites. This preserves legitimate cross-site embeds while removing the cross-site tracking ability. This page is educational.

Verified against primary sources

How CHIPS partitioning works

Normally a third-party cookie is stored in one jar keyed only to the cookie's own domain, so the same embed reads it on every site — the basis of cross-site tracking. With CHIPS, a cookie that carries the Partitioned attribute (and Secure) is stored under a key that includes the top-level site. The embed on news.example can set a partitioned cookie, but when it loads on shop.example it sees a separate, empty partition. The use cases are legitimate same-embed state like load balancing or session continuity within one site.

What it does and does not change

CHIPS is part of the broader move to phase out unpartitioned third-party cookies: embeds that need per-site state can keep working, while cross-site identity joining via cookies is removed. It does not anonymise anything — a partitioned cookie still identifies a returning user within the same top-level site, which is exactly what a first-party analytics cookie does too. And it does not replace cross-site advertising measurement; the Privacy Sandbox APIs target that separately. Treat CHIPS as scoping, not anonymisation.

The attribute is defined in the CHIPS specification and documented on MDN.

How it appears in analytics and logs

If a third-party embed sets a Set-Cookie with Partitioned, its cookie is isolated per top-level site; it cannot link the same user across unrelated sites.

Diagnostic use case

Understand how the Partitioned attribute lets embedded services keep state per top-level site without enabling cross-site tracking of the same user.

What WebmasterID can help detect

WebmasterID's first-party, cookieless approach does not rely on third-party cookies; CHIPS shows how browsers isolate the cross-site cookies it avoids.

Common mistakes

Privacy and accuracy notes

This page is educational, not legal advice. Partitioning reduces cross-site linkage but a cookie still identifies a user within one top-level site.

Related pages

Sources and verification notes

Last reviewed 2026-06-24. Facts are checked against primary/official sources where available; uncertain specifics are marked “Data not yet verified” rather than guessed.