Patent ID: 6959420

Claim:
In a client computer, a method comprising: receiving a response to a client request for content of a remote server, the response including data directed to a requested operation on a cookie; determining that standardized policy data is present with the response in the form of a set of at least one valid token; evaluating the standardized policy data against criteria available to the client to provide a privacy result by processing the set, including: a) selecting a valid token from the set as selected token; b) obtaining an obtained result corresponding to the selected token; c) determining whether the obtained result denies the requested operation, i) and if so, setting the privacy result so as to deny the requested operation and continuing to step e); ii) and if not, determining whether the obtained result for the selected token provides more privacy than a current most private result, and if so, setting the current most private result to the obtained result; d) returning to step a) until no other token in the set remains to be processed, and when no other token remains, selecting the current most private result as the privacy result; and e) returning the privacy result; and controlling the requested operation on the cookie based on the privacy result.