Grade C+ — Standard consumer terms (score 68/100)
Joomla's cookie policy explicitly allows browsing data sharing with advertisers, deploys GPS-tracking via YouTube, uses cross-domain profiling cookies (Adobe, PubMatic, LiveRamp), and is silent on security.
Heavy third-party ad tracking including precise GPS, no security commitment
They are also used to remember that you have visited a website, and this information is shared with other organisations such as advertisers.
Browsing/visit history is explicitly shared with third-party advertisers, enabling profiling and targeted ads.
Adobe Experience Cloud Identity Service Cookies. They are used to track users across domains.
Adobe's identity cookies link your activity across multiple Joomla and non-Joomla domains to build a cross-site profile.
GPS Google, Inc. (YouTube LCC) Track the GPS position of the user to show relevant content.
A YouTube/Google cookie on joomla.org captures the user's precise GPS location, a sensitive datum that is not needed for video playback.
Profiling cookie used by AddThis to analyse global audience... Uniquely identify each browser or device from which an individual user visits partners' websites... Collect segmented data about the
Multiple ad-tech vendors perform audience profiling and persistent device fingerprinting for cross-site targeting.
We do not require that you accept non-essential cookies. If you do accept our use of non-essential cookies, you can withdraw your consent or adjust your browser's privacy settings at any time.
Genuine opt-out for non-essential cookies without charge or friction.
Performance cookies ... _gid 24 hours ... AddThis / Oracle Corporation ... 2 years ... __cfduid ... 30 days ... AWSALB ... Session ... GPS ... Session ... YSC ... 1 day ... everest_g_v2 ... 2 years ... 1P_JAR ... 1 year
Each cookie carries an explicit expiration (Session, 30 days, 1 year, 2 years), giving users and auditors a concrete retention picture.
We plan to release a tool to control cookies on our websites soon. The tool will allow you to accept / delete all the cookies saved by any of the joomla.org websites.
A centralized self-serve cookie control tool is planned but not yet available.
Last reviewed 2026-09-17 under rubric v3.5.