JSESSIONID — Java (votre site)
By the OpenCookies team · published 2026-10-22 · updated 2026-10-22
- Service
- Java (votre site)
- Category
- Strictly necessary
- Default duration
- Session
- Type
- First-party cookie (set by your own site)
- Consent required?
- No: a cookie strictly necessary for the requested service does not require consent.
What is it for?
Session identifier of Java applications (Tomcat, Jetty, Spring…): it remembers what a visitor does from page to page. It disappears when the browser is closed.
What does it look like?
The value is a random string of about 32 hexadecimal characters.
How to see it in your browser
Open your site, press F12, then choose the “Application” tab (Chrome, Edge) or “Storage” (Firefox). Under “Cookies”, select your site’s address: the JSESSIONID cookie appears in the list if present, with its value and expiry date.
What does the rule say?
A cookie strictly necessary for the requested service does not require consent. It should still be listed in your cookie policy.
How to prevent it before the choice
Nothing to block if it only serves the site’s operation.
How OpenCookies handles it
OpenCookies does not block this cookie: it is needed for operation. The test still lets you see which cookies are set before any choice.
Check it on my site
Does this cookie appear on your site before the visitor chooses? The OpenCookies test shows it in two minutes.
Related cookies
PHPSESSID— PHP (votre site)
Frequently asked questions
Is it always necessary?
If it keeps a cart or login, yes. If it is created for plain visitors with no need, it can be avoided.
Can it appear in the page address?
On older sites yes (;jsessionid=…), which is discouraged.
Durations are defaults and may change with configuration. This page describes a cookie; it is not legal advice.