Abstract: The present invention involves a user agent (100) requesting a cookie-associated resource over Internet from a content provider (200) on behalf of a user. In response thereto, the content provider (200) transmits a privacy policy file, describing the content provider's policy regarding usage of cookies and privacy data in connection with the resource, to the user agent (100). The agent (100) then generates a cookie receipt specifying whether the user accepts the policy and, thus, accepts that the content provider sets a cookie on the user equipment (300) The receipt is transmitted to the content provider (200), e.g. in the HTTP header of a get resource message. In case of a positive receipt, the content provider (200) provides the requested resource and sets the cookie. If a negative receipt, a cookie-less version of the resource if provided to the user equipment (300).