What is the g_state cookie?
Set by Google's Identity Services library (used for "Sign in with Google" and One Tap) to remember state such as whether the One Tap prompt has already been shown or dismissed.
Our October 2026 scan found it on 92 sites (4% of the 2,450 we scanned), set before any consent.
- Purpose
- Functional
- Belongs to
- Set as
- First-party (under the site's own domain)
- Typical lifetime
- 6 months
Sites that set g_state before consent
The highest-ranked 30 of 92 sites.
- wordpress.com0 tracking companies
- dropbox.com0 tracking companies
- medium.com2 tracking companies
- cnn.com5 tracking companies
- canva.com1 tracking company
- alibaba.com7 tracking companies
- tradingview.com2 tracking companies
- issuu.com0 tracking companies
- claude.ai0 tracking companies
- duolingo.com1 tracking company
Show 20 more sites
- capcut.com2 tracking companies
- grammarly.com2 tracking companies
- mailchimp.com4 tracking companies
- zillow.com4 tracking companies
- fiverr.com7 tracking companies
- pexels.com4 tracking companies
- livejournal.com11 tracking companies
- mercadolivre.com.br1 tracking company
- mercadolibre.com.ar1 tracking company
- magnific.com2 tracking companies
- mercadolibre.com.mx1 tracking company
- lanacion.com.ar14 tracking companies
- nypost.com8 tracking companies
- clarin.com13 tracking companies
- ultimate-guitar.com0 tracking companies
- vnexpress.net14 tracking companies
- coursera.org1 tracking company
- gazzetta.it7 tracking companies
- bilibili.tv1 tracking company
- dribbble.com0 tracking companies
Related cookies
Other cookies from Google.
- _gcl_au336 sites
- FCCDCF141 sites
- receive-cookie-deprecation136 sites
- __Secure-YNID113 sites
- IDE82 sites
How to stop it
Declining non-essential cookies in a site's consent banner should stop g_state being set on later visits. Blocking third-party cookies in your browser settings stops the third-party kind everywhere, and clearing cookies for a site removes any it already set.
Description written by CookieTosser, for a cookie the Open Cookie Database doesn't cover.
Understanding this page
- How cookie lifetimes work, and why a 13-month _ga matters
What a cookie's "expires" field actually controls, why Google Analytics ships a 2-year default that many sites cut down to 13 months, and how Safari's 7-day cap on script-set cookies changes the picture.
- First-party vs third-party cookies (and why "first-party" still tracks you)
What the distinction actually means technically, why browsers only block one of the two, and how CNAME cloaking, server-side tagging and cookies like _ga let sites keep tracking under their own domain.
- How to block or limit trackers
Browser privacy settings, content blockers, Global Privacy Control and clearing cookies compared honestly — what each one actually stops, what it doesn't, and what it costs you in return.