# Cookie compliance under GDPR

**URL:** <https://meta.discourse.org/t/cookie-compliance-under-gdpr/85275>\
**Category:** Community Building\
**Tags:** gdpr\
**Created:** [April 13, 2018, 7:10pm UTC](https://meta.discourse.org/t/cookie-compliance-under-gdpr/85275 "2018-04-13T19:10:56Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![RGJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rgj/32/523185_2.png) [@RGJ](https://meta.discourse.org/u/RGJ)\
**Post date:** [April 13, 2018, 8:52pm UTC](https://meta.discourse.org/t/cookie-compliance-under-gdpr/85275/4 "2018-04-13T20:52:14Z")

</div>

> [@allu](#):
>
> Cookies can be used to uniquely identify a person, therefore they should be treated as personal data.

No: **if** cookies are used to uniquely identify a person, **then** they should be treated as personal data.

> [@allu](#):
>
> However, I would guess that the theme\_key cookie (and maybe the other non-session cookies as well), would classify as personal data, based on the following interpretation:

No, (emphasis mine)

> [@allu](#):
>
> personal data **if there is potential for an individual to be identified or singled out**.

The theme\_key cookie identifies a theme, not a person. I.e. multiple persons that use the same theme, will have the same theme\_key cookie. There is no way to identify or single out an individual using the theme\_key cookie. They are not personal data and they are not subject to the GDPR.

---

_[View the full topic](https://meta.discourse.org/t/cookie-compliance-under-gdpr/85275)._