Cookies can be used to store a user's personal data and online browsing habits.

Mark scheme

Marking points from the official mark scheme (May/June 2021). The mark or mark type is shown in brackets.

1. [1] Webserver sends (cookie) file to user's browser
2. [1] User's payment details stored in encrypted text file // data is encrypted to be stored
3. [1] Cookie file is stored by browser/on user's HDD/SSD
4. [1] When user revisits website, webserver requests cookie file // webserver can access the data stored in the cookie file (to automatically enter details)
5. [1] ... and browser sends cookie file back to webserver (to automatically enter the details)
6. [1] User does not see what information is stored // might collect data that user does not know about
7. [1] ... so, user may feel their privacy is affected
8. [1] A profile could be built about the user ... that could expose a user's identity // lead to identity theft
9. [1] Sensitive information stored in cookies could be intercepted in transmission ... Other websites could gain access to the cookies stored on a user's computer
10. [1] Computer could be hacked to obtain data stored in cookies ... so, payment information could be stolen and used by a third party