We’re unsure whether a cookie we want to use can be classed as mandatory to perform our services. The cookie in question is used for partner resellers and is used on our web portal.
The cookie is able to track users who have been referred to the website by one of our partner resellers via a special URL. A piece of code on the website reads the URL and looks out for a special ID that identifies the reseller. Once this ID is found, it is stored in the cookie. When the user purchases our services, this ID (which was previously stored in the cookie), is sent through to our API to inform us that this user was referred by one of our partner resellers.
When we receive this ID through our API, we pass it into our payment processor, Stripe. This can then apply referral discounts and also help us in knowing who needs to be paid what commission. This information is all then visible to our partner resellers within our integrated third-party reseller portal.
This cookie is necessary for our third-party reseller integration to work, and necessary for any referral links to actually provide discounts to customers. However, the cookie is not necessary for users who have not been referred by our partner resellers.
Can this cookie be classed as necessary in order for the platform to function?
After further research, I've found descriptions of compliance such as:
"Including a pop up may not provide the best user experience, so some companies have opted for including the cookie disclosure within their Terms and Conditions. This can be a very effective and non-intrusive method, but there are a couple of caveats.
Thanks for any insight you can give!