OneTrust Auto Block blocks Piwik Script

Hi,

we keep running into the same problem with OneTrust:

  1. OneTrust runs an automatic cookie scan
  2. OneTrust identifies cookies that Piwik PRO use’s but only once a user has given consent
  3. OneTrust auto blocks the Piwik PRO script so that it is only being placed if a user has accepted performance cookies. That means we can not track anonymous traffic.

For now, our solution is deleting the Piwik PRO Cookies out of the OneTrust backend. But the scan happens 2-3 times a month. There has to be another solution to be able to track anonymous traffic.

The OneTrust integration itself works fine.

Has anyone had the same issue and has found a solution?

Please let me know. Thank you!

Thimo

Hi Thimo,

Did you try to add the required cookies manually in OneTrust, so they won’t be overwritten by a OneTrust cookie scan. I know some sites use it like this.

The list of required cookies can be found here:

Let me know if it helps.

Cheers,
Richard

Hi Richard,

thank you so much for the quick reply.

We did not try that, yet.

When OneTrust does its auto scan it categorizes cookies like _pk_id as a third-party cookie. In the Piwik PRO over view, it states that it is a first-party cookie.

Just for my understanding, would we manually list all cookies e.g. _pk_id manually as first-party cookies, right?

Best,
Thimo

Yes, All Piwik PRO cookies are first party cookies.

Cheers Richard

Great. Even if we are using the cloud, right?

Best,
Thimo

Yes,
Core and Enterprise are the same regarding these functionalities.

If you are interested in the differences: Piwik PRO plans compared: Core vs Enterprise

Cheers,
Richard

Hi Richard,

thank you so much for your support and the quick replies.

Do you know how your other clients have categorized the Piwik PRO Cookies inside of OneTrust? I think to avoid the script being auto-blocked we would have to categorize all cookies as strictly necessary.

Best,
Thimo

Depending on the privacy setup you have.

If you use anonymous tracking without cookies, there is no need to add the pk_ cookies as strictly necessary. If you have a setup for 30 minute cookies, you need to set it as necessary.

ppms_privacy_ is necessary to store the consent state.

The other cookies are based on the type of triggers and tags you have setup (have a look at the initially shared page on regarding the cookies, we tried to describe it as detailed as possible per type of cookie)

Cheers,
Richard