What is the _ga cookie?
Used by Google Analytics to distinguish unique users and track their website usage.
Table of Contents
About _ga
| Vendor | |
|---|---|
| Category Category The functional category of the technology, such as Web Analytics or Social Media. Learn more | Advertising & Paid Media |
| Consent Category Consent Category The consent category this cookie most commonly falls under across sites we scan, normalized into four standard categories. Learn more | Performance & Analytics |
| Prevalence | Very Common |
| Popularity Popularity Popularity is calculated from our dataset of 4.5B+ cookies analyzed across hundreds of millions of web pages. Learn more | Found on 64.5% of scanned pages |
| Expiration Type | Timestamp |
| Expiration Duration | 4 days |
| Party Type Party Type Whether the cookie is first-party or third-party. Learn more | Mixed |
| Risk Level Risk Level Rates how sensitive the data stored by this cookie is (High, Medium, or Low) based on data classification and distribution. Learn more | Medium |
| Vendor Privacy Policy | https://policies.google.com/privacy |
| Vendor Website | https://analytics.google.com/ |
What is the purpose of _ga?
The _ga cookie is the primary tracking technology used by Google Analytics (both Universal Analytics and GA4) to distinguish unique visitors. It functions by assigning and storing a randomly generated Client ID on the visitor's device. When a user visits a website, the Google Analytics script checks for the presence of this cookie; if it does not exist, a new one is created with a unique identifier.
This Client ID allows the Google Analytics platform to stitch together user interactions across multiple pages and sessions. It enables website operators to track page views, events, and session metrics, while differentiating between new and returning visitors to compute user-centric metrics. The cookie does not store direct personal information, but it facilitates robust behavioral analytics and profiling for the domain on which it is set.
What are the Privacy Risks of _ga?
Risk Level: Medium
The _ga cookie stores a pseudonymous Client ID to track visitor behavior, measure engagement, and compile session analytics. While it does not hold direct Personally Identifiable Information (PII) like names or emails, its persistent identifier can be used to profile user behavior and navigation paths across the site over an extended period. This capacity for behavioral tracking presents a medium privacy risk, which is why privacy regulations typically categorize it as an analytics cookie requiring explicit user consent.
How to Remove _ga from a Website
To remove the _ga cookie, a website administrator must completely remove the Google Analytics scripts (such as gtag.js or analytics.js) and any associated tag manager deployments from the website's source code. Alternatively, the administrator can alter the tracking tag's configuration to use cookieless tracking (for example, by setting the client_storage parameter to none), which disables the creation of the cookie while preserving a degraded level of data collection. If the cookie is removed or disabled, the platform will no longer be able to track returning visitors across sessions.