---
title: Cookie usage
slug: cms-11/dev-docs/managing-cookies-on-the-website
docTags: 
createdAt: 2026-07-22T19:45:22.664Z
---

Use cookies for various types of website tracking, such as browser sessions.

Optimizely Content Management System (CMS) uses the following cookies:

| Cookie Name                                                                 | Purpose                                                                                                                                                                                                                                                                                                                                                   |
| --------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `ASP.NET_SessionId`                                                         | Strictly necessary. A session cookie is sent to the web browser. Use it when you open the browser and visit a website implementing the ASP.NET session state. This cookie identifies requests from the same browser during a limited session window when browsing the website. This cookie is deleted when you close your browser.                        |
| `EPi:NumberOfVisits`                                                        | Functionality-related. Stores the number of times you access pages on the site to allow personalization of content based on the frequency at which a visitor views the site content. Use it with the **Number of Visits** personalization criterion. This cookie is not set if you remove it from your visitor groups. Persistent (1 year from creation). |
| `.EPiServerLogin`, `EPiDPCKEY`, `.ASPXRoles`                                | Strictly necessary. It is only used if you log in to a website. You should clearly state on the login page that cookies are used if you log in. This cookie allows for login/access and permissions when using the CMS interface. It is deleted when you close your browser.                                                                              |
| \``__epiXSRF` & `__RequestVerificationToken` & `__RequestVerificationToken` | Strictly necessary. It is used by the Optimizely security components, protects the user against cross-site request forgery (XSRF), and is used only by the CMS UI. This cookie is deleted when you close your browser.                                                                                                                                    |
| `ImageEditorFileSize`                                                       | Used by the Image Editor.                                                                                                                                                                                                                                                                                                                                 |
| `_utma`, `_utmb`, `_utmc`, `_utmz`                                          | These are commonly used Google Analytics cookies on Optimizely websites. Use these third-party cookies to collect information about how visitors use the website.                                                                                                                                                                                         |

## Protect visitor privacy

According to EU directives, website owners are responsible for informing visitors about cookies used on the site. See [Protect Your Visitors’ Privacy According to EU Directive on Cookies](https://world.optimizely.com/articles/Items/Protecting-Your-Visitors-Privacy-According-to-EU-Directive-on-Cookies/).