Cookie Security Attribute Adoption (SameSite, Secure, HttpOnly) Across 101 Popular Websites (2026)

An open, reproducible dataset measuring how 101 popular websites configure the security attributes of the cookies they set on their first HTTPS response: SameSite, Secure and HttpOnly. Of 77 cookie-setting domains, 71% used SameSite, 92% used Secure and 64% used HttpOnly, showing measurable and inconsistent adoption of basic cookie privacy protections. The scan is fully reproducible with curl (script included) and the method, scope and limitations are documented in the README. Published as first-hand, verifiable privacy research maintained alongside the privacy tooling and guides at Priviy. Data collected 2026-07-22.