Overview
Adobe Commerce (formerly Magento) is an enterprise e-commerce platform that powers the entire storefront experience, from product browsing through checkout and payment processing. Its presence indicates the website's core shopping functionality — product catalogs, cart management, and order processing — runs on Adobe's commerce infrastructure. Unlike Adobe's marketing products, Adobe Commerce scripts are integral to the website's primary function.
What This Script Does
Adobe Commerce loads platform scripts that handle core storefront operations: rendering product pages, managing shopping cart state, processing checkout flows, and handling payment integrations.
Key cookies set:
PHPSESSIDorform_key— server-side session cookie that maintains authenticated state and CSRF protection. Session-scoped.mage-cache-storage— local storage/cookie for caching page content and customer section data on the client side. Enables fast page updates without full reloads. Session-scoped.mage-cache-sessid— tracks whether a cache refresh is needed for customer-specific content. Session-scoped.mage-messages— stores flash messages (success, error notifications) for display after page transitions. Session-scoped.recently_viewed_product— records recently viewed product IDs for the "Recently Viewed" widget. Persistent, typically 1-year expiry.product_data_storage— caches product comparison data. Session-scoped.store— records the selected store view in multi-store configurations. 1-year expiry.mage-translation-storage— caches translation data for the selected locale. Session-scoped.
All requests are served from the website's own domain. Adobe Commerce runs on the site's own servers or Adobe's managed cloud infrastructure but does not make client-side calls to external tracking or advertising domains as part of its core platform operation.
The platform handles sensitive operations including payment form rendering (typically via iframe-based payment integrations like Braintree or PayPal), customer account management, and order processing. These are functional requirements of the e-commerce service the visitor is actively using.
Consent & Compliance
Adobe Commerce is classified as essential. Its scripts and cookies are strictly necessary for the e-commerce functionality that constitutes the website's core service.
Under the GDPR, the cookies set by Adobe Commerce (session management, cart state, CSRF tokens) are processed under the "performance of a contract" lawful basis when the visitor is actively shopping. No consent is required for cookies that are technically necessary to provide the service explicitly requested by the user.
The ePrivacy Directive exempts strictly necessary cookies from the consent requirement. Session cookies, cart state, CSRF tokens, and store preference cookies all qualify for this exemption as they are essential to providing the e-commerce service the visitor is using.
Under CCPA/CPRA, while Adobe Commerce processes personal information (account data, purchase history), this processing is for the core business purpose of providing the e-commerce service and is exempt from opt-out requirements under the "performing services" exception.
Should You Block This Without Consent?
No. Adobe Commerce provides the core e-commerce functionality of the website. Blocking its scripts would break product browsing, cart management, checkout, and payment processing. Its cookies qualify as strictly necessary under the ePrivacy Directive.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
magento.comEssentialFrequently Asked Questions
Does Adobe Commerce require cookie consent?
No. Adobe Commerce (formerly Magento) is essential e-commerce infrastructure. Its cookies — session management, cart state, CSRF tokens, and store preferences — are strictly necessary for the shopping experience users explicitly engage with. GDPR Article 6(1)(b) and ePrivacy's strictly necessary exemption both apply.
What cookies does Adobe Commerce set?
Adobe Commerce sets PHPSESSID or form_key (session CSRF protection), mage-cache-storage and mage-cache-sessid (session, client-side cache management), mage-messages (session, flash notifications), recently_viewed_product (1-year, viewed product history), store (1-year, selected store view), and product_data_storage (session, comparison cache).
How does ConsentStack treat Adobe Commerce?
ConsentStack classifies Adobe Commerce as essential and never blocks it. Cart management, checkout, and payment scripts load freely. Adobe marketing products layered on top — such as Adobe Analytics or Audience Manager — are gated separately behind their own consent categories.
Other Adobe Products
Related Vendors
Manage consent for Adobe Commerce
ConsentStack automatically detects and manages Adobe Commerce trackers so your site stays compliant with global privacy regulations.