# Storage Access API

DevFeed: [Storage Access API](<https://devfeed.tech/articles/storage-access-api-89153.md>)

Original publisher: [Read original article](<https://specification.website/spec/privacy/storage-access-api/>)

Author: Joost de Valk

Published: 2026-07-05T10:00:00Z

Content type: tutorial

Language: en

Sources: [The Website Specification](<https://devfeed.tech/sources/the-website-specification.md>)

Topics: [cross-origin-storage](<https://devfeed.tech/topics/cross-origin-storage.md>), [Single sign-on (SSO)](<https://devfeed.tech/topics/sso.md>), [API](<https://devfeed.tech/topics/api.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [cookies](<https://devfeed.tech/tags/cookies.md>), [cross](<https://devfeed.tech/tags/cross.md>), [optional](<https://devfeed.tech/tags/optional.md>), [privacy](<https://devfeed.tech/tags/privacy.md>), [request](<https://devfeed.tech/tags/request.md>)

## AI overview

The Storage Access API lets embedded cross-site content request access to its unpartitioned cookies and storage after a user gesture. This tutorial explains when to use it, the browser and iframe requirements, cookie settings, common mistakes, and ways to verify the flow. It presents the API as a privacy-preserving option for legitimate cases such as federated sign-in and embedded account widgets.

## Source excerpt

As browsers partition and block third-party cookies, embedded cross-site content uses the Storage Access API to request its own cookies behind a user gesture -- instead of asking visitors to switch off tracking protection.