Microsoft Edge, why still logged in webshop with VPN while cookies and history removed

Question

Microsoft Edge, why still logged in webshop with VPN while cookies and history removed

piet9999999999 0

I was logged in a webshop with VPN to buy something.

When I removed cookies and history I was still logged in webshop, I tried more webshops and same problem.

When I do the same in e.g. Firefox I am logged out automatically after removing cookies and history.

Because of privacy I am curious where Edge my data is saving without any cookies (all removed) ?

0 comments

2 answers

Your answer

Answer 1

Hendrix-V 13,025 Microsoft External Staff Moderator

Hi piet9999999999,

Thank you for reaching out.

In Microsoft Edge, clearing cookies and browsing history does not always remove all website sign‑in data. Many modern websites use additional browser storage (such as site data or session storage) or re‑authenticate using the browser profile, which can allow a session to remain active even after cookies are removed. This is why behavior may differ compared to other browsers like Firefox.

Here are some possible options that you can try to fully sign out of websites in Edge

Option 1: Clear all site data

Open Edge > Settings
Go to Privacy, search, and services
Select Clear browsing data
Choose All time
Select:
- Cookies and other site data
- Cached images and files
- Site permissions
Click Clear now

Option 2: Use InPrivate or Guest mode (best for privacy)

Open a new InPrivate or Guest window
All site data and sign‑ins are automatically removed when the window is closed

Option 3: Sign out of the Edge profile

Click your profile icon in Edge
Sign out or switch to Guest mode to avoid browser‑level sign‑in persistence

If you frequently shop or test logins and want strict privacy separation, InPrivate or Guest mode provides the most predictable behavior across all websites.

Let me know if you need further assistance, feel free to ask me by clicking "Add Comment" or "Add Answer" if you cannot add comment so your response will be visible. Thanks for your effort.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

piet9999999999 0 Reputation points

2026-03-15T17:19:43.07+00:00

Of course when I log out, I am not logged in anymore, this not what I meant, maybe not clearly described.

I mean when I do all the things you mentioned while logged in, and refresh the website, I am still logged in.

So where is my data kept? Has it something to do with the profile used in Windows (you must otherwise Windows does not work), other browsers has no connection with that profile.

I am as a php developer curious where my data is saved during the session without cookies and Edge profile?
piet9999999999 0 Reputation points

2026-03-15T17:21:11.5166667+00:00

Of course when I log out, I am not logged in anymore, this not what I meant, maybe not clearly described.

I mean when I do all the things you mentioned while logged in, and refresh the website, I am still logged in.

So where is my data kept? Has it something to do with the profile used in Windows (you must otherwise Windows does not work), other browsers has no connection with that profile.

I am as a php developer curious where my data is saved during the session without cookies and Edge profile?
Hendrix-V 13,025 Reputation points Microsoft External Staff Moderator

2026-03-18T01:53:10.4633333+00:00
Hi piet9999999999,

Thank you for clarifying.

When cookies are removed while you remain logged in and the page is refreshed, the session can still persist because modern websites often do not rely on cookies alone for authentication.

Many web applications restore the session using non‑cookie mechanisms, such as browser site storage (for example, local or session storage) or server‑side session continuation. In this case, Edge is simply allowing the website to re‑establish the session based on how the site’s authentication logic is designed.

This behavior is not related to the Windows user account and does not depend on being signed in to Edge. Other browsers may appear to behave differently because they clear additional site data by default.

Where the session data is typically kept:

Website‑managed site storage (not cookies)

Server‑side session state, restored on refresh

Authorization headers or tokens, re‑applied by the site

The browser does not independently store login state outside these mechanisms. If predictable logout behavior is important (for testing or privacy), InPrivate or Guest mode provides the cleanest, isolated session environment.

If you have any further questions or updates regarding this issue, please feel free to let me know in the Comments section. I'd be happy to assist you.
piet9999999999 0 Reputation points

2026-03-19T18:04:24.77+00:00

Hi Hendrix-V,

Yes you are right and thanks for the clear answer.

Even their are no cookies you can communicate the session_id in a different way (e.g. parameters in an URL).

And this depends on the website/shop created, I tested an older website and that session was gone while clearing site-data and cookies in Edge, for the simple reason there was no session_id communicated in another way (as in the websites/shops for greater organisations, they do both).

So the difference with e.g. Firefox is, when you clear their site-data and cookies they also reconnect the session, while e.g. Edge tries to keep the connection, nothing wrong with that because you logged in and you can log out whenever you want, if you don't and the browser can keep the connection, that is a better technique (and in case of disturbances).
Hendrix-V 13,025 Reputation points Microsoft External Staff Moderator

2026-03-20T23:24:13.6633333+00:00

Hi piet9999999999,

I'm relieved to know that you made a great decision and everything is good to go on your side. I hope the insights shared in the forum help address your concerns effectively.

If there is anything else I can assist you with, please feel free to let me know in the Comments section.

Answer 2

Edge stores several types of data that can keep a session active even after clearing standard cookies and history:

Site data beyond basic cookies
Edge, like other modern browsers, can store data such as local storage, session storage, and other site data that a website can use to recognize a logged-in session. Clearing only “cookies and history” may not remove all of this site data, depending on which options were selected in the Clear browsing data dialog.
Single sign-on and identity integration
When signed into Microsoft Edge with a Microsoft, work, or school account, Edge enables single sign-on to certain sites. Being signed in to Edge can keep identity and authentication information available, which may allow some websites to keep the session active even after cookies are cleared. To reduce this effect:
- Go to Settings and more (…) > Settings > Profiles and sign out or remove the profile if no identity association with Edge is desired.
- To further limit automatic sign-in, clear cookies: Settings and more (…) > Settings > Privacy, search, and services > Clear browsing data.
How to ensure more complete clearing of data
Use Clear browsing data and make sure all relevant categories are selected (not just history and cookies). This removes browsing history, cookies, and site data, as well as cached data. For more isolation when shopping or testing logins, use InPrivate browsing or guest mode. In these modes, Edge deletes browsing history, cookies, site data, passwords, addresses, and form data when all InPrivate windows are closed.

Because of these mechanisms (site data types and Edge sign-in/SSO), a webshop session can remain active in Edge after clearing only cookies and history, while Firefox—depending on its settings—may clear more of the underlying site data or handle sessions differently.

References:

Share via

Microsoft Edge, why still logged in webshop with VPN while cookies and history removed

2 answers

Your answer