Tired of the [ads from that site you visited following you around](https://goadopt.io/en/blog/gdpr-cookies-explained/)?
Is your computer running slow when accessing a particular website?
Want to delete all cookies from a specific service or site?

One of the alternatives is to **delete Cookies and Cache from your browsers!**
We'll provide you with step-by-step instructions for each of these options. But before that, to make things clear:

## What is cache?

The term cache is basically the storage of frequently used data or processes, which are stored for faster future access, thus saving time and unnecessary use of hardware processing.

This functionality is widely used in various types of devices and software, such as browsers, for example. You know when you first access a website and it takes longer to load than your favorite site that you visit every day?

That's precisely the practical application of cache! Your browser has saved various information and page structures in a reserved environment so that you don't have to download them again on future visits. This makes everything faster, especially for those with weaker internet or weak signals.

## What are cookies?

In short, cookies serve the same function as cache in terms of storing information, but in different formats and processes. Many of the services we access daily use cookies for other functionalities such as remembering your browser as a returning client, keeping items you "left in the shopping cart," recording information about your browsing, etc.

In this [article](https://goadopt.io/en/blog/lgpd-cookies-all-you-need-to-know/), you can find a more in-depth explanation.

In other words, both cookies and cache store information in your computer's or mobile device's memory. As a result, they often overload the storage and slow down the system. That's why various browsers have rules to delete all cookies every three months, for example, or are starting to block third-party cookies to avoid this unnecessary accumulation.

However, sometimes the browser's cleaning cycle is not enough.
So learn from [AdOpt](https://goadopt.io/) how to delete your browser's cache and cookies:

## How to quickly delete cookies and cache?

Sometimes, when you're experiencing issues with using an online service or accessing a website, the technical team asks you to clear the browser cache.

To get rid of the data stored on your computer when you access a website, you don't need to go to the Google Chrome Preferences. Just use the shortcut below:

### On Windows
Control + Shift + Del

Command + Shift + Del

After that, simply select the items you want to delete: cache, cookies, history... and DONE!

![clear_cookies_cache_chrome.png](https://strapi.goadopt.io/uploads/clear_cookies_cache_chrome_32fa1b37f4.png)

## Delete Cookies in Chrome

If you're using Google Chrome,

1. Click on the **three dots in the upper right corner** to open a configuration menu.
2. Go to **More Tools**.
3. Then click on **Clear browsing data**. A new window, as shown in the image below, will open, and in it, you just need to choose what you want to clear: - **Cookies and other site data - Cached images and files**.
4. **After selecting the options, click the "Clear browsing data" button.**

**Done!**

Then click on Clear browsing data. A new window, as shown in the image below, will open, and in it, you just need to choose what you want to clear: - Cookies and other site data - Cached images and files.

After selecting the options, click the "Clear browsing data" button.

Done!

By following these instructions, your computer will be lighter, and your browsing experience will improve.
**But be prepared because all saved logins and access will also be cleared, requiring you to sign in again and "prove that you are you."**

## Clearing Cookies in Internet Explorer

If your browser is **Internet Explorer**, for any version, follow the steps below:

1. Access the menu on the right **Settings** (indicated by the gear icon as shown below).
2. Click on **Security > Delete browsing history.** (A window will open, showing your browsing history).
3. By clicking the **Delete** button, you can delete all the data saved by the **Internet Explorer **browser.

### Clearing Cookies in Mozilla Firefox
For versions of the **Mozilla Firefox **browser, follow the simple cleaning process below:

1. Menu **Firefox > Preferences**.
2. Choose the **Privacy** option.
3. Select the option **Clear your recent history**: *Here, you can determine **the time period** to be deleted and the respective details to select.
4. To finish, simply click **Clear Now.**
5. **Done**! You can now continue browsing peacefully!

## Clearing Cookies in Safari
For Safari users, the process to clear cookies is also straightforward.

Click on the **Preferences** option.
Select the **Privacy** option > **Remove all website data.**
After this click, confirm your decision.

## Continue learning about cookies

To see how cookies differ from other browser storage, read the [difference between cookies, local storage and session storage](https://goadopt.io/en/blog/difference-cookies-local-storage-session-storage/). If you wonder why every site asks about cookies, read [why cookie banners are everywhere](https://goadopt.io/en/blog/why-are-cookie-banners-everywhere/). And to see what happens when you answer the banner, read [how the cookie banner works](https://goadopt.io/en/blog/operation-of-cookie-banner/).


How to delete cookies and cache in Chrome and other browsers?

João Bruno Soares

Compliance doesn't have to be a nightmare, whether you are a marketing professional or a **[Data protection officer](https://goadopt.io/en/blog/responsibilities-of-a-data-protection-officer/)**, making simple mistakes can easily ruin your brand's reputation.

Facing million-dollar **[fines](https://goadopt.io/en/blog/company-fined-the-end/)** and losing user trust are the biggest risks today. Everything starts with how you manage **[cookies](https://goadopt.io/en/blog/lgpd-cookies-all-you-need-to-know/)** at the front door of your website.

We are here to simplify this for you. Let's dive into the five biggest market mistakes and how a solid **[Cookie notice/banner](https://goadopt.io/en/blog/operation-of-cookie-banner/)** solves this on autopilot.

## How to Avoid GDPR and CCPA Legal Issues

The global privacy landscape is changing extremely fast. Because of that, knowing if your **[website needs cookie consent](https://goadopt.io/en/blog/website-needs-cookie-consent-gdpr-lgpd-ccpa/)** is no longer a choice, it's a mandatory rule.

Tech giants have paid millions in **[fines](https://goadopt.io/en/blog/gdpr-lgpd-and-ccpa-what-are-these-laws-similarities-and-differences/)** just for ignoring basic transparency and data tracking guidelines.

The good news is that you don't need to pause your operations. Our technology protects everything, from your blog to your **[e-commerce](https://goadopt.io/en/blog/impact-ecommerce-lgpd/)**, without any headaches.

Common Issue: Unclear Cookie Banner Text
Many businesses rely on cookie consent notices filled with confusing or vague language. Here are some common pitfalls:

![common-privacy-dark-patterns.png](/uploads/common_privacy_dark_patterns_1a54e06b8c.png)

### 1. Confusing Consent Text

Using technical jargon or generic text only pushes visitors away. Global laws like the **[LGPD](https://goadopt.io/en/blog/lgpd-general-data-protection-law/)** demand total clarity and transparency in your communication.

Pre-made phrases like "we use technologies to improve your experience" mean absolutely nothing. You need to clearly explain the true role of **[cookies](https://goadopt.io/en/blog/lgpd-cookies-all-you-need-to-know/)** on your page.

The solution is a colloquial and direct language. A great **[Cookie banner](https://goadopt.io/en/blog/why-are-cookie-banners-everywhere/)** must detail the collection purposes without sounding like a boring contract.

### 2. Hiding the Reject Option

Hiding the reject button in difficult menus is a dark pattern that generates heavy **[fines](https://goadopt.io/en/blog/company-fined-the-end/)** in Europe and the Americas.

Your visitor must have the exact same ease to accept or reject tracking. This balance is the core of why a **[website needs cookie consent](https://goadopt.io/en/blog/website-needs-cookie-consent-gdpr-lgpd-ccpa/)**.

Avoid buttons with muted colors or tiny fonts. Let your **[Data protection officer](https://goadopt.io/en/blog/responsibilities-of-a-data-protection-officer/)** validate the interface to ensure no deceptive patterns exist.

![table-2.png](/uploads/table_2_2f71ca54e2.png)

### 3. Firing Cookies Before Permission

This is the fatal error that destroys many traffic managers' strategies. Loading tracking scripts before the "accept" click is a clear violation of the **[LGPD](https://goadopt.io/en/blog/lgpd-general-data-protection-law/)** and GDPR.

The golden rule is: block everything that isn't strictly essential. You do not want marketing tools and **[cookies](https://goadopt.io/en/blog/lgpd-cookies-all-you-need-to-know/)** running without the user's green light.

To be sure your site is running clean, instruct your tech team to **[delete cookies](https://goadopt.io/en/blog/delete-cookies-cache-chrome/)** and simulate accesses as a first-time visitor.

### 4. Poor Consent Record Management

A beautiful banner is useless if you don't store the logs correctly. Remember that a proper **[website needs cookie consent](https://goadopt.io/en/blog/website-needs-cookie-consent-gdpr-lgpd-ccpa/)** involves keeping safe proof of actions.

During an audit, your company and the **[Data protection officer](https://goadopt.io/en/blog/responsibilities-of-a-data-protection-officer/)** will need to present data such as date, time, and exact user preferences.

Losing this information leaves your operation completely vulnerable. A lack of documentation is a direct shortcut to **[fines](https://goadopt.io/en/blog/fines-in-LGPD/)** that can shut down your business.

### 5. Pre-checked Boxes and Assumed Consent

The era of assuming a user agreed just by scrolling the page is over. Modern frameworks like the **[LGPD](https://goadopt.io/en/blog/lgpd-general-data-protection-law/)** strictly prohibit implied consent.

Pre-checked boxes or forced cookie walls are not allowed. The power of choice regarding **[cookies](https://goadopt.io/en/blog/lgpd-cookies-all-you-need-to-know/)** must be actively in the hands of the visitor.

Respecting this autonomy builds a much stronger brand perception. At the end of the day, it increases trust in your **[e-commerce](https://goadopt.io/en/blog/impact-ecommerce-lgpd/)** and brings qualified leads.

## How AdOpt Solves This For You

Adapting your marketing processes doesn't have to be ugly or exhausting. Our CMP technology resolves your **[Cookie notice/banner](https://goadopt.io/en/blog/why-are-cookie-banners-everywhere/)** installation in a few clicks.

With our platform, script blocking happens automatically, protecting your campaigns and mitigating 100% of the risk of **[fines](https://goadopt.io/en/blog/fines-in-LGPD/)** from improper tracking.

We keep the entire consent history encrypted and organized. It's the security your **[Data protection officer](https://goadopt.io/en/blog/responsibilities-of-a-data-protection-officer/)** needs, with the design your brand deserves.

## Frequently Asked Questions (FAQ) About Cookie Consent

### 1. Why should I care about cookie consent?
Ignoring permission tracking is a critical **compliance** error that directly hurts your business. If you receive international traffic, knowing exactly why your **[website needs cookie consent](https://goadopt.io/en/blog/website-needs-cookie-consent-gdpr-lgpd-ccpa/)** is the first step to avoiding penalties and protecting your brand.

### 2. Can I leave the accept box pre-checked?
Absolutely not, as modern privacy rules require affirmative action. Strict frameworks, like the **[LGPD](https://goadopt.io/en/blog/lgpd-general-data-protection-law/)** and GDPR, prohibit implied consent, ensuring the visitor has total control over their data.

### 3. What happens if I hide the reject button?
Making it hard to refuse trackers is a deceptive practice highly penalized by regulatory authorities. Besides destroying user trust, this flaw attracts heavy financial **[fines](https://goadopt.io/en/blog/fines-in-LGPD/)** that can cripple your company's budget.

### 4. Should cookies be blocked before the user accepts?
Exactly, because no advertising or marketing script should be fired in the browser without prior authorization. Our AdOpt platform blocks these tags before the visitor interacts with the **[Cookie banner](https://goadopt.io/en/blog/why-are-cookie-banners-everywhere/)**, doing all the heavy lifting for you.

### 5. Who is responsible for managing these consents?
While the tech team handles the installation, the responsibility for keeping records secure falls on managers and the **[Data protection officer](https://goadopt.io/en/blog/responsibilities-of-a-data-protection-officer/)**. These professionals use our automated reports to prove legality during an audit.

## Take the Next Step Towards Compliance

Don't let bureaucratic mistakes harm your **[LGPD e-commerce](https://goadopt.io/en/blog/impact-ecommerce-lgpd/)** performance or your agency's metrics.

Compliance technology doesn't have to be an expensive and complex hurdle, and we are ready to show you how fast and smooth it can be.

Book a free demo with our team of experts right now through **[our HubSpot](https://meetings.hubspot.com/vrumor/adopt-meeting-valquiria?uuid=e1bc9e87-710e-4f13-894e-4ade5ce7af10)** and discover how to automate your consent management.


5 Common Cookie Consent Mistakes Hurting Your Compliance

The Oregon Consumer Privacy Act (OCPA, ORS 646A.570 et seq.) has a specific requirement for the privacy notice that does not appear as explicitly in other US state privacy laws: the notice must include an **active email address or other online method** that the controller **actively monitors**.

This page covers one piece of the picture. For the full scope of the OCPA — who must comply, the thresholds, the consumer rights and the penalties — start with our [complete guide to the OCPA and cookies](https://goadopt.io/en/blog/oregon-ocpa-and-cookies-all-you-need-to-know/).

Publishing an email is not enough. It needs to be genuinely monitored. The first-year enforcement report (August 2025) identified non-functional contact channels as one of the most common problems found during investigations.

This article focuses exclusively on what the OCPA requires from the Privacy Policy, based on the official text of the law.

## What the OCPA calls a Privacy Notice

The law uses the term privacy notice. In practice, it is the Privacy Policy that most sites already have, but with OCPA-specific content elements.

Section 5(4) requires the controller to provide consumers with a privacy notice that is "reasonably accessible, clear, and meaningful."

## What must be in the Privacy Policy under the OCPA

### 1. Categories of personal data processed, including sensitive data

The notice must list the categories of personal data processed by the controller, including categories of sensitive data (Section 5(4)(a)).

Personal data under the OCPA includes derived data, an important differentiator from other laws. Marketing profiles and behavioral scores created from the consumer's data are personal data under the law.

Sensitive data, per Section 1(18), includes: racial or ethnic background, religious beliefs, mental or physical condition, sexual orientation, status as transgender or nonbinary, status as a crime victim, citizenship or immigration status, precise geolocation data (within 1,750 feet), genetic or biometric data, and personal data of children under 13. Any of these categories must be explicitly listed.

### 2. The purpose for processing

The notice must describe the controller's purposes for processing personal data (Section 5(4)(b)).

Section 5(2)(a) prohibits processing for purposes not reasonably necessary or compatible with those declared, except with consumer consent.

Vague descriptions like "improve your services" or "personalize your experience" do not meet the requirement. "Behavioral data collected via analytics to identify pages with high abandonment rates and prioritize usability improvements" is the correct level of specificity.

### 3. How consumers exercise their rights and file appeals

The notice must describe how consumers can exercise the rights guaranteed by the OCPA and how to appeal a denial decision (Section 5(4)(c)).

It is not enough to list that rights exist. The process must be described: which channel to use, how identity authentication works, the 45-day response deadline, and how the appeal process works with its 45-day response period.

The [data protection officer](https://goadopt.io/en/blog/responsibilities-of-a-data-protection-officer/) or compliance lead must have this workflow mapped and operationally functional.

### 4. Categories of data shared with third parties, including sensitive data

If the business shares data with third parties, the notice must disclose all categories of personal data shared, including categories of sensitive data (Section 5(4)(d)).

This covers email marketing tools, CRMs, analytics platforms, advertising networks, payment processors, and any external service that receives user data.

### 5. Categories of third parties and how each may process data

This is the OCPA's most specific requirement compared to other US state laws. Section 5(4)(e) requires that the notice describe all categories of third parties with whom data is shared at a level of detail that enables the consumer to understand what type of entity each third party is and, to the extent possible, how each third party may process personal data.

Generic categories like "business partners" are not sufficient. The correct level is something like: "audience analytics platforms that use browsing data to generate aggregated usage reports" or "digital advertising networks that use behavioral identifiers to display personalized ads on other sites the consumer visits."

### 6. Active email address or online contact mechanism, actively monitored

Section 5(4)(f) requires the notice to include an email address or other online method the consumer may use to contact the controller, and that channel must be **actively monitored** by the controller.

This is one of the OCPA's most specific requirements. Publishing an email address that nobody checks does not comply. The 2025 enforcement report confirmed that non-functional contact channels were among the most frequent problems found during investigations.

### 7. Complete identification of the controller

The notice must identify the controller, including the business name registered with the Oregon Secretary of State and any assumed business name used in the state (Section 5(4)(g)).

If the company operates under a brand different from its legal name, both must be identified.

### 8. Description of targeted advertising and profiling with opt-out

If the business processes data for targeted advertising or profiling for decisions with legal effects or effects of similar significance, the notice must describe this clearly and conspicuously, with the opt-out procedure accessible (Section 5(4)(h)).

Targeted advertising, per Section 1(19), consists of ads based on data collected from the consumer's activities over time and across non-affiliated websites or online applications. Contextual ads based on the current session are not included.

If your site uses a Meta Pixel, Google Ads, TikTok Pixel, or any programmatic advertising tool that collects data in other environments, you are operating targeted advertising and must disclose this explicitly.

### 9. Method for submitting rights requests, including GPC recognition

The notice must describe the method or methods the controller has established for consumers to submit rights requests (Section 5(4)(i)).

Per Section 5(5), this method must:

Consider how consumers normally interact with the controller.

Ensure security and reliability in communications.

Allow authentication of the consumer's identity.

Provide a clear and conspicuous link for opting out of targeted advertising.

As of **January 1, 2026**, it is also mandatory to honor universal opt-out signals, such as the Global Privacy Control (GPC), provided they meet specific technical requirements (Section 5(5)(c)).

Must not require the consumer to create a new account. The business may require use of an existing account, but cannot force new registration to exercise rights guaranteed by law (Section 4(2)).

## Disclosure of targeted advertising and data sale

If the business sells personal data or processes it for targeted advertising, Section 5(4)(h) requires clear and conspicuous disclosure in the Privacy Policy, along with the opt-out procedure.

The first-year enforcement report identified that many businesses were not offering consumers the right to list the specific third parties that received their data. This was the most frequently denied right in Oregon during the first year.

## Sensitive data: additional requirements

Sensitive data receives special treatment and must be specifically identified in the Policy.

If the business collects any data in this category, the Policy must:

Explicitly identify that sensitive data is collected.

Describe the specific purpose for processing each category.

Explain how consumer consent is obtained prior to processing.

Detail how that consent can be revoked, respecting the **15-day** cessation deadline after revocation (Section 5(1)(d)).

For children's data, the business must comply with COPPA requirements, per Section 5(2)(b) of the OCPA.

## Protection for teens aged 13 to 15

Section 5(2)(c) prohibits processing data of consumers aged 13 to 15 for targeted advertising, profiling for decisions with legal effects, or data sales without those consumers' consent, when the controller has actual knowledge of that age range.

As of **January 1, 2026**, protection was expanded: prohibition on selling data of minors under 16 and on using data of minors under 16 for targeted advertising and certain types of profiling.

The Privacy Policy must specifically reflect these protections if the business may reach this audience.

## Data Protection Assessments: what the Policy needs to address

Section 8 requires controllers to conduct and document Data Protection Assessments for high-risk activities, including targeted advertising, data sales, profiling with foreseeable risk of harm, and sensitive data processing.

Assessments do not need to be published in the Policy, but must be documented, retained for at least **five years** (Section 8(6)), and available to the Attorney General upon request. They are confidential and exempt from public disclosure (Section 8(7)).

The Policy should make clear that the business conducts impact assessments for high-risk activities as part of its compliance program.

## Non-discrimination policy

Section 5(2)(d) expressly prohibits businesses from discriminating against consumers who exercise their rights. This includes denying products or services, charging different prices, or offering lower quality as a consequence.

The exception is voluntary loyalty, rewards, premium features, discount, or club card programs that offer benefits in exchange for data use, provided the consumer participates voluntarily (Section 5(3)(b)).

## The elimination of the cure period and its impact on the Policy

Through December 31, 2025, the Attorney General was required to notify the business and grant 30 days to cure violations before initiating formal action.

**As of January 1, 2026, that cure period was eliminated.** The AG may initiate action directly, without prior notice (Section 11 of the OCPA).

An incomplete Privacy Policy is one of the easiest violations to identify. Updating the document before an investigation was efficient when the cure period existed. Now, it is the only way to protect the business.

## How AdOpt supports compliance with the OCPA

AdOpt ensures that what is written in the Policy has real correspondence with what actually happens on the site.

The automatic scan identifies all active technologies, feeding the list of data categories and third parties that must appear in the document. The [consent management platform](https://goadopt.io/en/blog/how-to-choose-cmp-consent-management-platform/) ensures the consent and opt-out mechanism works as described, including automatic recognition of the GPC from January 2026 and processing of revocations within 15 days.

Every interaction is logged. If the Attorney General requests evidence, the record is available.

Over 60,000 websites already run with AdOpt.

Privacy is not a banner. It is a position.

[Want to build a Privacy Policy for your site that complies with the OCPA? Talk to our team.](https://meetings.hubspot.com/vrumor/adopt-meeting-valquiria)

## Checklist: what the Privacy Policy must contain for the OCPA

**Visible and accessible link** on all pages of the site.

**Categories of personal data processed**, with explicit mention of sensitive data and derived data (Section 5(4)(a)).

**Purpose of processing** for each category, without vague descriptions (Section 5(4)(b)).

**How to exercise all L.O.C.K.E.D. rights** with process, channel, and 45-day response deadline (Section 5(4)(c)).

**Appeal process** with a 45-day deadline and information about the Attorney General (Section 4(6)).

**All categories of personal data shared with third parties**, including sensitive data (Section 5(4)(d)).

**Categories of third parties** with detail about entity type and how each may process data (Section 5(4)(e)).

**Active email or online contact method, actively monitored** by the controller (Section 5(4)(f)).

**Complete controller identification**, including assumed business name if applicable (Section 5(4)(g)).

**Description of targeted advertising or data sale** with accessible opt-out (Section 5(4)(h)).

**Request submission method** described, without requiring a new account (Section 5(4)(i) and 5(5)).

**GPC recognition** from January 2026 (Section 5(5)(c)).

**15-day deadline** for honoring consent revocation (Section 5(1)(d)).

**Protection for teens aged 13 to 15** with consent requirement (Section 5(2)(c)).

**Prohibition on data sales and targeted advertising for minors under 16** from January 2026.

**Non-discrimination policy** for consumers exercising their rights (Section 5(2)(d)).

**Reference to Data Protection Assessments** for high-risk activities (Section 8).

## FAQ: OCPA and Privacy Policy

**1. Why does the OCPA require the contact channel to be actively monitored?**
Section 5(4)(f) specifically requires the controller to specify an email or other online method that the controller "actively monitors." This distinguishes the OCPA from other state laws that simply require an available channel. The 2025 enforcement report identified non-functional rights request forms as one of the most frequent problems during investigations, confirming that the AG verifies whether channels actually work.

**2. What is derived data and why does the OCPA include it in personal data?**
Derived data is data created or inferred from other consumer data. Marketing profiles, propensity scores, audience segment classifications. The OCPA explicitly includes derived data in the personal data definition (Section 1(13)), meaning that when a consumer requests a copy or deletion of their data, derived data is also in scope. The enforcement report identified that businesses were not including back-end data in responses, which constitutes a direct violation.

**3. Why does the OCPA require more detail about third parties than other state laws?**
Section 5(4)(e) requires the description of third-party categories to be at a level of detail that enables the consumer to understand "what type of entity each third party is and, to the extent possible, how each third party may process personal data." This goes beyond what laws like the [VCDPA](https://goadopt.io/en/blog/virginia-vcdpa-and-cookies-all-you-need-to-know/) require, which ask only for categories of third parties without the detail about how they process data. In practice, "business partners" is not sufficient.

**4. What happens to sensitive data if the consumer revokes consent?**
Section 5(1)(d) requires the controller to provide a revocation mechanism at least as easy as the consent mechanism. After revocation, the controller must cease processing as soon as practicable, but **not later than 15 days**. This 15-day deadline is a differentiator of the OCPA. The Privacy Policy must inform consumers of this deadline so they know what to expect.

**5. How does the elimination of the cure period affect the urgency of updating the Privacy Policy?**
Before January 2026, the AG was required to notify the business and grant 30 days to cure violations. With that period eliminated by Section 11 of the OCPA, the AG may initiate action directly. An incomplete Privacy Policy that previously could have been corrected after notification now represents immediate risk of penalties of up to US$ 7,500 per violation. Each affected consumer can be counted as a separate violation.

[Ready to build a Privacy Policy for your site that complies with the OCPA? Talk to our team.](https://meetings.hubspot.com/vrumor/adopt-meeting-valquiria)

## Continue learning about Oregon OCPA compliance

Oregon OCPA compliance rests on documents that need to agree with each other: the [cookies policy](https://goadopt.io/en/blog/oregon-ocpa-cookies-policy/), which declares every tracker and its purpose; the [privacy portal](https://goadopt.io/en/blog/oregon-ocpa-dsar-privacy-portal/), which is where the consumer exercises their rights and you keep the record of it.


All posts

How to delete cookies and cache in Chrome and other browsers?

5 Common Cookie Consent Mistakes Hurting Your Compliance

Oregon OCPA: Privacy Policy