What is the _derived_epik cookie?
_derived_epik is an HTTP cookie tied to Pinterest's advertising services. It appears on a website when that site integrates the Pinterest conversion pixel (Pinterest Tag), "Pin It" buttons, Pinterest content widgets, or other scripts Pinterest provides to marketers and site owners.
It is set by a Pinterest domain (or an associated subdomain) as soon as the tracking code loads on the page, regardless of whether the visitor has a Pinterest account.
What data it stores
The cookie stores a value derived from a tracking identifier Pinterest uses to recognize the visitor's browser on later visits. The exact value format is not publicly documented by Pinterest, and details may vary over time.
Data collected through this cookie is sent to Pinterest's servers, where it is combined with other tracking signals (such as the _epik cookie) to build a behavioral profile of the user across multiple sites.
What it is used for
For Pinterest, the cookie helps measure advertising campaign effectiveness, attribute conversions (e.g. purchases made after seeing a Pinterest ad), and build retargeting audiences.
For the website operator, using this cookie through Pinterest's tools enables campaign performance reporting and helps optimize marketing spend on the platform.
Does it require consent?
_derived_epik is classified as a marketing cookie (advertising/tracking). Under GDPR (Regulation 2016/679) and the ePrivacy Directive, this type of cookie cannot be placed before obtaining the visitor's explicit consent.
- The cookie must be clearly listed in the site's cookie policy, with its provider, purpose, and duration.
- The Pinterest script that sets the cookie must be blocked until consent is given.
- The site operator must be able to demonstrate, if audited by a data protection authority, that valid consent existed before activation.
How to block or delete _derived_epik
Visitors can manually delete or block the cookie through browser settings (Chrome, Firefox, Edge, Safari — cookie management sections), enable "block third-party cookies" options, or use dedicated privacy extensions.
For site operators, blocking must happen before consent, not just be documented after the fact. A consent management platform like CookieFix can automatically intercept Pinterest scripts and block them until the visitor accepts the "marketing" category, preventing the _derived_epik cookie from being set prematurely.
Frequently asked questions
It's an HTTP marketing cookie used by Pinterest to track visitor behavior and measure advertising effectiveness.
It's not malicious, but it is a tracking cookie used for advertising purposes, which is why the law imposes strict consent requirements on it.
It typically lasts 1 year from when it's set or last updated, based on Pinterest's practices.
Yes, as a marketing cookie it requires the visitor's prior, explicit consent before it can be set.