Broadly speaking, cookies are either ‘session-based’ or ‘persistent’. The former is deleted when you close your browser. The latter is more likely to collect a greater amount of personal information, such as browsing behaviour if so-configured, and is deleted manually or on its expiration date.
The MSL system, as provided to you, includes two cookies:
The session cookie and aspxauth are strictly necessary for the functioning of the logged in site. We do not offer a way of disabling these, and the user should not disable these if they want a logged-in browsing experience.
If you are making use of Google Analytics (the majority of MSL clients are) your site will also drop the following cookies:
In the case of non-essential cookies obtain your users' consent to store the cookies on their device (Previously, you just needed to give people an option to opt-out of having cookies stored.) We also recommend you also list the cookies on your site's terms & conditions page with appropriate descriptions and expiry information as above.
Non-essential cookies you may have on your site would include Google Analytics tracking cookies, social media plugins, remember me options, and 'do not show again' popup preferences.
The ICO provides detailed guidance in this area, including tips for conducting a cookies audit so why not take some time right now to check that your site is up to scratch:
Every browser is different, and the information provided in the following links may not work for older versions of the browser you are using, but you will be able to find out how by searching the internet for "how to remove cookies from [your broswer name] [your browser version]"