# How can I set the session cookie "compact privacy policy"?

**URL:** <https://www.ruby-forum.com/t/how-can-i-set-the-session-cookie-compact-privacy-policy/119166>\
**Category:** Rails\
**Created:** [November 4, 2007, 6:30am UTC](https://www.ruby-forum.com/t/how-can-i-set-the-session-cookie-compact-privacy-policy/119166 "2007-11-04T06:30:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jeffpritchard](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/43a26b/32.png) [@jeffpritchard](https://www.ruby-forum.com/u/jeffpritchard)\
**Post date:** [November 4, 2007, 6:30am UTC](https://www.ruby-forum.com/t/how-can-i-set-the-session-cookie-compact-privacy-policy/119166/1 "2007-11-04T06:30:41Z")

</div>

I’m trying to do an iFrame implementation. I ran aground of something  
called a “compact privacy policy” that IE6 uses to decide whether or not  
to allow third party cookies (third party because my iFrame is hosted on  
someone else’s site).

Right now, IE6 needs to have its privacy settings “wide open” in order  
for my iFrame to work right. I’m hoping that by sending an appropriate  
compact privacy policy as part of the HTTP header when the cookie is  
created and read that users will be able to see my iFrame even with  
stricter settings.

Here’s a microsoft site that explains some of the details:

> **[Content Removed (Windows)](https://learn.microsoft.com/en-us/previous-versions//ms537341(v=vs.85)?redirectedfrom=MSDN)**

I’m wondering how I can set the compact privacy policy sent by Rails  
when it is doing session cookie stuff.

Clearly I’m out of my comfort zone here. Perhaps I’ve completely  
mis-understood this stuff, and if so some education is welcome.

thanks,  
jp