# OneTrust Auto Block blocks Piwik Script

**URL:** <https://community.piwik.pro/t/onetrust-auto-block-blocks-piwik-script/2773>\
**Category:** Privacy\
**Created:** [August 25, 2023, 7:36am UTC](https://community.piwik.pro/t/onetrust-auto-block-blocks-piwik-script/2773 "2023-08-25T07:36:49Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![thimo\_hofner](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/thimo_hofner/32/2283_2.png) [@thimo\_hofner](https://community.piwik.pro/u/thimo_hofner)\
**Post date:** [August 25, 2023, 7:36am UTC](https://community.piwik.pro/t/onetrust-auto-block-blocks-piwik-script/2773/1 "2023-08-25T07:36:49Z")

</div>

Hi,

we keep running into the same problem with OneTrust:

1. OneTrust runs an automatic cookie scan
2. OneTrust identifies cookies that Piwik PRO use’s but only once a user has given consent
3. OneTrust auto blocks the Piwik PRO script so that it is only being placed if a user has accepted performance cookies. That means we can not track anonymous traffic.

For now, our solution is deleting the Piwik PRO Cookies out of the OneTrust backend. But the scan happens 2-3 times a month. There has to be another solution to be able to track anonymous traffic.

The OneTrust integration itself works fine.

Has anyone had the same issue and has found a solution?

Please let me know. Thank you!

Thimo

---

<div class="post-metadata">

**Author:** ![rmastop](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/rmastop/32/29_2.png) [@rmastop](https://community.piwik.pro/u/rmastop)\
**Post date:** [August 25, 2023, 7:50am UTC](https://community.piwik.pro/t/onetrust-auto-block-blocks-piwik-script/2773/2 "2023-08-25T07:50:56Z")

</div>

Hi Thimo,

Did you try to add the required cookies manually in OneTrust, so they won’t be overwritten by a OneTrust cookie scan. I know some sites use it like this.

The list of required cookies can be found here:

> **[Cookies created for visitors by Piwik PRO | Data and cookies | Piwik PRO help...](https://help.piwik.pro/support/privacy/cookies-created-for-visitors-by-piwik-pro/)**
>
> When visitors come to your website with Piwik PRO installed, Piwik PRO will set cookies in their browser and back them up to local storage. Which cookies are created depends on the privacy settings and features you use. Although it’s possible to...

Let me know if it helps.

Cheers,  
Richard

---

<div class="post-metadata">

**Author:** ![thimo\_hofner](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/thimo_hofner/32/2283_2.png) [@thimo\_hofner](https://community.piwik.pro/u/thimo_hofner)\
**Post date:** [August 25, 2023, 8:13am UTC](https://community.piwik.pro/t/onetrust-auto-block-blocks-piwik-script/2773/3 "2023-08-25T08:13:03Z")

</div>

Hi Richard,

thank you so much for the quick reply.

We did not try that, yet.

When OneTrust does its auto scan it categorizes cookies like \_pk\_id as a third-party cookie. In the Piwik PRO over view, it states that it is a first-party cookie.

Just for my understanding, would we manually list all cookies e.g. \_pk\_id manually as first-party cookies, right?

Best,  
Thimo

---

<div class="post-metadata">

**Author:** ![rmastop](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/rmastop/32/29_2.png) [@rmastop](https://community.piwik.pro/u/rmastop)\
**Post date:** [August 25, 2023, 8:22am UTC](https://community.piwik.pro/t/onetrust-auto-block-blocks-piwik-script/2773/4 "2023-08-25T08:22:06Z")

</div>

Yes, All Piwik PRO cookies are first party cookies.

Cheers Richard

---

<div class="post-metadata">

**Author:** ![thimo\_hofner](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/thimo_hofner/32/2283_2.png) [@thimo\_hofner](https://community.piwik.pro/u/thimo_hofner)\
**Post date:** [August 25, 2023, 8:24am UTC](https://community.piwik.pro/t/onetrust-auto-block-blocks-piwik-script/2773/5 "2023-08-25T08:24:14Z")

</div>

Great. Even if we are using the cloud, right?

Best,  
Thimo

---

<div class="post-metadata">

**Author:** ![rmastop](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/rmastop/32/29_2.png) [@rmastop](https://community.piwik.pro/u/rmastop)\
**Post date:** [August 25, 2023, 8:50am UTC](https://community.piwik.pro/t/onetrust-auto-block-blocks-piwik-script/2773/6 "2023-08-25T08:50:45Z")

</div>

Yes,  
Core and Enterprise are the same regarding these functionalities.

If you are interested in the differences: [Piwik PRO plans compared: Core vs Enterprise](https://piwik.pro/core-vs-enterprise/)

Cheers,  
Richard

---

<div class="post-metadata">

**Author:** ![thimo\_hofner](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/thimo_hofner/32/2283_2.png) [@thimo\_hofner](https://community.piwik.pro/u/thimo_hofner)\
**Post date:** [August 25, 2023, 8:56am UTC](https://community.piwik.pro/t/onetrust-auto-block-blocks-piwik-script/2773/7 "2023-08-25T08:56:48Z")

</div>

Hi Richard,

thank you so much for your support and the quick replies.

Do you know how your other clients have categorized the Piwik PRO Cookies inside of OneTrust? I think to avoid the script being auto-blocked we would have to categorize all cookies as strictly necessary.

Best,  
Thimo

---

<div class="post-metadata">

**Author:** ![rmastop](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/rmastop/32/29_2.png) [@rmastop](https://community.piwik.pro/u/rmastop)\
**Post date:** [August 25, 2023, 9:27am UTC](https://community.piwik.pro/t/onetrust-auto-block-blocks-piwik-script/2773/8 "2023-08-25T09:27:22Z")

</div>

Depending on the privacy setup you have.

If you use anonymous tracking without cookies, there is no need to add the pk\_ cookies as strictly necessary. If you have a setup for 30 minute cookies, you need to set it as necessary.

ppms\_privacy\_ is necessary to store the consent state.

The other cookies are based on the type of triggers and tags you have setup (have a look at the initially shared page on regarding the cookies, we tried to describe it as detailed as possible per type of cookie)

Cheers,  
Richard
