How can websites recognise you after you delete cookies?

You can wipe cookies and still return to a website looking surprisingly familiar. The reason may be device fingerprinting, which relies on technical clues your browser shares during a visit.

Blaai hier deur die feeskoerant: https://tinyurl.com/OppiDamFeeskoerant

You clear your cookies, reopen a website, and it still seems to recognise your laptop or phone. Deleting cookies helps, but it does not erase every signal your browser shares. A cookie is one way a site can remember a visit; device fingerprinting can use a different set of clues.

South Africa's Competition Commission describes browser fingerprinting as a combination of browser version, operating system, language, plugins, ad-blocker settings, timezone and related configuration data. None of those details needs the old cookie. Put enough signals together, and the browser can look distinctive enough to connect one visit with another.

Browser checks used to separate people from bots do a different job. CAPTCHA tests an interaction. Fingerprinting examines the technical setup used to reach a site.

Clearing cookies can remove stored identifiers, preferences and login information, depending on what your browser deletes. A fingerprint is different because it can be reconstructed from device and browser signals during a later visit. You wiped one record; you did not necessarily change the setup producing those signals.

University of Pretoria cybersecurity guidance explains that digital fingerprints can identify browsers and devices even when people take steps against cookie-based tracking. A fingerprint needs enough persistence and uniqueness to help distinguish one setup from another. Changing some device or browser settings can alter parts of the fingerprint, which means recognition is not perfect or guaranteed.

Account logins create a separate route. If you sign back into a service, the service knows which account is in use regardless of whether the old cookie survived. Browser sessions are worth checking on shared computers, especially with linked accounts and QR-based logins.

Clearing cookies still has a purpose

Cookie deletion can sign you out, remove saved site preferences and erase identifiers stored in cookie files. It simply does not promise anonymity. South Africa's POPIA sets minimum requirements for processing personal information by public and private bodies, while website privacy notices can explain which data a service collects and why.

You can review browser privacy controls, limit permissions, use separate browser profiles, and sign out of accounts you no longer need open. Stronger sign-in methods such as passkeys and 2FA deal with account security, while cookie controls deal with browser storage. Different tools, different jobs.

Deleting cookies is useful, but it is not an invisibility switch. Your browser still has a technical identity made from the details it shares. Knowing the difference lets you choose privacy controls with clearer expectations.

A familiar website after a cookie wipe is not proof that someone knows exactly who you are. It may mean the service can recognise a browser or device from signals that survived the cleanup or were rebuilt on the next visit. Cookies are one piece of the picture, and deleting one piece does not erase the rest.