Overview
Adobe Commerce (formerly Magento) is an enterprise e-commerce platform that powers the entire storefront experience, from product browsing through checkout and payment processing. Its presence indicates the website's core shopping functionality — product catalogs, cart management, and order processing — runs on Adobe's commerce infrastructure. Unlike Adobe's marketing products, Adobe Commerce scripts are integral to the website's primary function.
What This Script Does
Adobe Commerce loads platform scripts that handle core storefront operations: rendering product pages, managing shopping cart state, processing checkout flows, and handling payment integrations.
Key cookies set:
PHPSESSIDorform_key— server-side session cookie that maintains authenticated state and CSRF protection. Session-scoped.mage-cache-storage— local storage/cookie for caching page content and customer section data on the client side. Enables fast page updates without full reloads. Session-scoped.mage-cache-sessid— tracks whether a cache refresh is needed for customer-specific content. Session-scoped.mage-messages— stores flash messages (success, error notifications) for display after page transitions. Session-scoped.recently_viewed_product— records recently viewed product IDs for the "Recently Viewed" widget. Persistent, typically 1-year expiry.product_data_storage— caches product comparison data. Session-scoped.store— records the selected store view in multi-store configurations. 1-year expiry.mage-translation-storage— caches translation data for the selected locale. Session-scoped.
All requests are served from the website's own domain. Adobe Commerce runs on the site's own servers or Adobe's managed cloud infrastructure but does not make client-side calls to external tracking or advertising domains as part of its core platform operation.
The platform handles sensitive operations including payment form rendering (typically via iframe-based payment integrations like Braintree or PayPal), customer account management, and order processing. These are functional requirements of the e-commerce service the visitor is actively using.
Consent & Compliance
Adobe Commerce is classified as essential. Its scripts and cookies are strictly necessary for the e-commerce functionality that constitutes the website's core service.
Under the GDPR, the cookies set by Adobe Commerce (session management, cart state, CSRF tokens) are processed under the "performance of a contract" lawful basis when the visitor is actively shopping. No consent is required for cookies that are technically necessary to provide the service explicitly requested by the user.
The ePrivacy Directive exempts strictly necessary cookies from the consent requirement. Session cookies, cart state, CSRF tokens, and store preference cookies all qualify for this exemption as they are essential to providing the e-commerce service the visitor is using.
Under CCPA/CPRA, while Adobe Commerce processes personal information (account data, purchase history), this processing is for the core business purpose of providing the e-commerce service and is exempt from opt-out requirements under the "performing services" exception.
Should You Block This Without Consent?
No. Adobe Commerce provides the core e-commerce functionality of the website. Blocking its scripts would break product browsing, cart management, checkout, and payment processing. Its cookies qualify as strictly necessary under the ePrivacy Directive.
Is Adobe Commerce GDPR compliant?
Adobe Commerce's trackers are classified as essential (strictly necessary), so they are generally exempt from prior consent under the GDPR. You should still list them in your cookie policy and privacy notice so visitors know they are there.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
magento.comEssentialmagento.com is an essential domain operated by Adobe Commerce, used to keep the site working, including security, load balancing, and sessions.
Cookies Adobe Commerce Sets (4)
form_keyAdobe Commerce (Magento) cross-site request forgery token. Embedded in every form on the storefront so the server can verify the submission originated from the authenticated session. Required for form submissions to succeed.
private_content_versionAdobe Commerce (Magento) private-content version stamp. Drives the storefront cache-buster for per-customer dynamic sections (cart preview, wishlist count) so the full-page cache can still serve everyone else from cache.
mage-cache-storageMagento storefront cache state cookie used to coordinate front-end rendering with the storefront cache.
mage-cache-sessidMagento storefront cache session marker used by the storefront full-page cache.
Frequently Asked Questions
Other Adobe Products
Related Vendors
Manage consent for Adobe Commerce
ConsentStack automatically detects and manages Adobe Commerce trackers so your site stays compliant with global privacy regulations.