Third-Party Cookies: Where Things Actually Stand Right Now

The death of third-party cookies has been announced, postponed, re-announced, and re-postponed so many times that many marketers have simply stopped paying attention. That's understandable, but it's also a mistake. The underlying reality — that browser-based cross-site tracking is eroding regardless of Chrome's timeline — has been true for years. Safari and Firefox blocked third-party cookies years ago. iOS 14 gutted mobile attribution. Privacy regulations tightened globally. Chrome was just the last domino, and its exact fall date matters less than the direction everything is moving.

What Actually Happened With Chrome's Cookie Deprecation

Google's original plan was to deprecate third-party cookies in Chrome by the end of 2024. That deadline was pushed to 2025, then restructured entirely. Instead of a hard deadline, Google is now pursuing a different approach — giving users explicit choice over whether to enable cross-site tracking in Chrome, rather than eliminating it for everyone at once.

This doesn't mean third-party cookies are safe. It means the transition is being managed more gradually, with user choice at the center. For most users who choose the privacy-protective default, third-party cookies will be effectively unavailable. For marketers, the practical outcome is similar to full deprecation — just spread over a longer timeline.

What Has Already Been Lost

While debate about Chrome timelines dominated the conversation, several major changes already happened that significantly reduced the effectiveness of third-party tracking:

• Safari ITP (Intelligent Tracking Prevention): Blocks third-party cookies entirely, limits first-party cookies set via JavaScript to 7 days, and caps cookie lifespans aggressively. Safari has ~20% desktop and ~25% mobile browser share.
• Firefox Enhanced Tracking Protection: Blocks known trackers by default. Firefox has ~3–4% market share but signals a broader direction.
• iOS App Tracking Transparency: Since iOS 14.5, apps must ask permission to track. Opt-in rates are typically below 25%, meaning 75%+ of iOS users are invisible to cross-app attribution.
• Ad blocker adoption: Global ad blocker usage is now estimated at 40%+ among desktop internet users. These typically block tracking scripts regardless of cookie policy.

What Marketers Should Actually Be Doing Right Now

The businesses that will come out ahead are not the ones watching Chrome's timeline — they're the ones building measurement infrastructure that doesn't depend on third-party cookies in the first place.

• Server-side tracking: Send conversion data from your server to ad platforms via APIs (Google Ads API, Meta Conversion API, TikTok Events API). This bypasses browser restrictions entirely.
• First-party data collection: Build your email list, implement loyalty programs, and create gated content. First-party data is the currency of the post-cookie world.
• Consent Mode v2: Implement Google's Consent Mode v2 to enable modeled conversions for users who decline cookies. This recovers a significant portion of otherwise lost signal.
• Enhanced Conversions: Use Google Ads Enhanced Conversions and Meta's CAPI to match hashed user data (email, phone) against platform profiles for more accurate attribution.
• Marketing Mix Modeling: For larger budgets, MMM provides channel-level effectiveness measurement that requires no individual user tracking at all.

The Honest Bottom Line

Third-party cookies as a universal cross-site tracking mechanism are already functionally deprecated for a significant portion of your audience. The Chrome timeline is almost beside the point. What matters is building measurement that works in a privacy-first environment — server-side integrations, first-party data strategies, and consent-respecting architectures that comply with GDPR, CCPA, and emerging regulations globally.

The businesses that treat this as a crisis are those that built their entire measurement strategy on a foundation they didn't own. The ones treating it as an opportunity are those building durable, first-party infrastructure that will outlast every future platform change.