First-party cookies blocked

[helenafranca]

In the example below, several 1P cookies are blocked. In my understanding, they are blocked because www.voeazul.com.br is a different domain than voeazul.com.br. Nevertheless, if domains are different, why does PSAT consider these cookies as first-party cookies?

[amedina]

The scenario in these cases is not that the domain of the cookie is a 3P domain, but the domain of the cookie does not match exactly the domain of the top-level site (i.e. Domain mismatch). Several factors can play a role here. Look at the values of the `SameSite` attribute as well as the `Path` attribute. Some of the blocked 1P cookies have `SameSite=Strict`, others have different values in the `Path`, and others have `www` as the prefix of the top-level domain whereas the top-level domain does not have `www`.

[amedina]

Also notice that most of these cookies are blocked only on some of the requests going out, as indicated by the orange upwards arrow. This means that the cookies are not fully blocked.

[helenafranca]

I find it interesting that in many cases, due to the SameSite attribute, these cookies are already broken today.