Web · Performance and privacyOctober 2, 20264 min · updated October 15, 2026
Vercel stops caching responses with Vary: Cookie: what to check on your site
Daillac research
Vercel — Vary: Cookie responses no longer cachedD

On September 30, 2026, Vercel announced that its CDN no longer stores original responses whose Vary header includes Cookie. Pages continue to be served, but these responses no longer become CDN cache entries. For a site using cookies, it is necessary to check which routes are affected before concluding a degradation or modifying the headers.
In brief
- The change targets responses with Vary: Cookie, not all sites using cookies.
- A MISS result describes cache behavior; it does not by itself constitute a failure.
- A personalized response must retain the appropriate protection for its data.
Why this distinction matters
Vary indicates the elements of a request likely to modify the response. According to Vercel, cookies can multiply variants and produce entries that are rarely reused. The announcement specifies that other supported Vary headers retain their behavior.
Vercel indicates that the affected responses show x-vercel-cache: MISS and the reason vary_key_denied:cookie in the execution logs. These markers help identify the phenomenon. They do not, on their own, measure the perceived time by visitors or the full site load.
Identify the pages actually affected
Start with an inventory of routes: public content, customer account, dashboard, cart, and pages varying according to a choice. Check the responses produced with and without cookies, then examine the headers and logs. A component or intermediate service can add Vary without the content manager knowing.
Measure important journeys under comparable conditions. The server response, the downloaded resources, and the rendering in the browser all contribute to the experience. If the cache changes, this effect must be isolated from images, JavaScript, or a slow external service.
Separate public content and personal content
Vercel's documentation distinguishes two cases: a response truly identical regardless of cookies, and a response that depends on them. This analysis must be carried out route by route. Removing Cookie from Vary without checking personalization can give the cache incorrect information about the content.
TableSeparate public content and personal content · shareable block
| Question to ask | Check before change | |
|---|---|---|
| Public article | Does the content vary according to a cookie? | Compare the body and headers in the contexts used |
| Customer account | Does it contain visitor-specific information? | Check for absence of sharing between users |
| Selection page | Does the response depend on a saved choice? | Define where the variation occurs |
| Mixed journey | Can we distinguish public and personal parts? | Test the separation without changing the rights |
For a personalized response, Vercel recommends keeping Cookie in Vary and using Cache-Control: private to avoid storage in a shared CDN cache. The final choice must take into account the entire processing chain, not just a header previewed on a page.
What this means for businesses
A public catalog may need a different strategy than a client space. A company looking to improve performance must first understand the data and the variations of each path. The edge guide in Canada reminds that geographic proximity is only part of the architecture.
The announced change does not prove that your site is affected. It justifies a targeted check. Keep a measurement baseline before corrections and monitor privacy after any cache modification.
A diagnostic sheet per route
For each concerned route, note the presence of Vary: Cookie, the expected content without login and with two different accounts, the observed cache state, and response time. Compare the same conditions before and after a correction. An identical public page for all and a personalized customer area call for different decisions. This record allows quantifying the problem before touching the cache policy.
Sources and method
Vercel — Vary: Cookie responses no longer cached. Sources consulted on October 1, 2026; the grids and decision examples are an editorial analysis by Daillac.
Check the cache of important journeys
Send the public and connected routes that concern you. We can prepare a report on headers and cache behavior on these journeys.
Sources & method
Summary of the primary announcement, verified on October 1, 2026, with editorial analysis of implications, limitations, and decisions for businesses. The products mentioned have not been tested by Daillac for this article.
News feed
October 2, 2026
AI · Digital Transformation
Barclays expands Claude: lessons from an enterprise rollout for smaller businesses
October 2, 2026
AI · Search and integration
Browserbase joins AI Gateway: controlled web access for AI agents
October 2, 2026
Cloud · AI agent security