Morph DocsCookies
What cookies Morph sets on your published site and what they're used for.
Morph's runtime script sets one cookie on your published site. This page explains what it is, why it exists, and what you should tell your visitors.
morph_ret cookie
| Property | Value |
|---|---|
| Name | morph_ret |
| Value | 1 |
| Duration | 1 year |
| Domain | Your published site's domain |
| Path | / |
| Secure | Yes (on HTTPS sites) |
| SameSite | Lax |
| Set by | Morph runtime script (first-party) |
Purpose
The morph_ret cookie identifies returning visitors. On a visitor's first page load, the Morph runtime sets this cookie. On subsequent visits, the runtime checks for its presence and classifies the visitor as "returning" instead of "new".
This powers the Visitor Type condition — you can show different content to first-time visitors versus people who've been to your site before.
What it does NOT do
- No tracking across sites — the cookie is first-party, scoped to your domain only
- No personal data — the cookie value is just
1(a boolean flag). It doesn't contain any user identifier, email, IP address, or browsing history - No third-party sharing — Morph does not share cookie data with advertisers or third parties
- No fingerprinting — the cookie is the only client-side data Morph stores
Cookie banner requirements
If your site has visitors from the EU/EEA, you likely need to disclose this cookie in your cookie banner or privacy policy. Here's what to include:
Cookie name: morph_ret
Category: Functionality / Personalization
Purpose: Identifies returning visitors to show personalized content
Duration: 1 year
Type: First-party, non-essential
Morph's cookie is classified as non-essential under GDPR because it's used for content personalization, not core site functionality. If you're required to get consent before setting non-essential cookies, you may need to configure your cookie consent tool to gate the Morph runtime script.
Opting out
If a visitor clears their cookies or uses a privacy-focused browser that blocks first-party cookies, the morph_ret cookie won't persist. These visitors will always be classified as "new" — your default variant will show.
No other cookies
Morph sets only the morph_ret cookie. The runtime script does not set any analytics, advertising, or session cookies.