Cookie flavors

The Office of Management and Budget has set different policies for two kinds

of cookies.

Session cookies: Cookies that expire when the user closes the Web browser

at the end of an online session.

OMB's policy: Agencies can use session cookies without notifying users

in the Web site's posted privacy policy.

Persistent cookies: Cookies that are stored on a user's computer and

expire after a specific time.

OMB's policy: Agencies must notify visitors if the Web site uses persistent

cookies, demonstrate a compelling need to collect the information, gain

the approval of the agency's top official and have the appropriate safeguards

for protecting the stored data.