Skip to content
Web · Performance and privacyOctober 2, 20264 min · updated October 15, 2026

Vercel stops caching responses with Vary: Cookie: what to check on your site

Daillac research
Vercel — Vary: Cookie responses no longer cached
D
Written by
Daillac

Editorial team

Illustration of cached public pages and a personal response delivered separately
On September 30, 2026, Vercel announced that its CDN no longer stores original responses whose Vary header includes Cookie. Pages continue to be served, but these responses no longer become CDN cache entries. For a site using cookies, it is necessary to check which routes are affected before concluding a degradation or modifying the headers.
In brief
  • The change targets responses with Vary: Cookie, not all sites using cookies.
  • A MISS result describes cache behavior; it does not by itself constitute a failure.
  • A personalized response must retain the appropriate protection for its data.

Why this distinction matters

Vary indicates the elements of a request likely to modify the response. According to Vercel, cookies can multiply variants and produce entries that are rarely reused. The announcement specifies that other supported Vary headers retain their behavior.
Vercel indicates that the affected responses show x-vercel-cache: MISS and the reason vary_key_denied:cookie in the execution logs. These markers help identify the phenomenon. They do not, on their own, measure the perceived time by visitors or the full site load.

Identify the pages actually affected

Start with an inventory of routes: public content, customer account, dashboard, cart, and pages varying according to a choice. Check the responses produced with and without cookies, then examine the headers and logs. A component or intermediate service can add Vary without the content manager knowing.
Measure important journeys under comparable conditions. The server response, the downloaded resources, and the rendering in the browser all contribute to the experience. If the cache changes, this effect must be isolated from images, JavaScript, or a slow external service.

Separate public content and personal content

Vercel's documentation distinguishes two cases: a response truly identical regardless of cookies, and a response that depends on them. This analysis must be carried out route by route. Removing Cookie from Vary without checking personalization can give the cache incorrect information about the content.
TableSeparate public content and personal content · shareable block
Separate public content and personal content
Question to askCheck before change
Public articleDoes the content vary according to a cookie?Compare the body and headers in the contexts used
Customer accountDoes it contain visitor-specific information?Check for absence of sharing between users
Selection pageDoes the response depend on a saved choice?Define where the variation occurs
Mixed journeyCan we distinguish public and personal parts?Test the separation without changing the rights
For a personalized response, Vercel recommends keeping Cookie in Vary and using Cache-Control: private to avoid storage in a shared CDN cache. The final choice must take into account the entire processing chain, not just a header previewed on a page.

What this means for businesses

A public catalog may need a different strategy than a client space. A company looking to improve performance must first understand the data and the variations of each path. The edge guide in Canada reminds that geographic proximity is only part of the architecture.
The announced change does not prove that your site is affected. It justifies a targeted check. Keep a measurement baseline before corrections and monitor privacy after any cache modification.

A diagnostic sheet per route

For each concerned route, note the presence of Vary: Cookie, the expected content without login and with two different accounts, the observed cache state, and response time. Compare the same conditions before and after a correction. An identical public page for all and a personalized customer area call for different decisions. This record allows quantifying the problem before touching the cache policy.

Sources and method

Vercel — Vary: Cookie responses no longer cached. Sources consulted on October 1, 2026; the grids and decision examples are an editorial analysis by Daillac.

Check the cache of important journeys

Send the public and connected routes that concern you. We can prepare a report on headers and cache behavior on these journeys.
Sources & method

Summary of the primary announcement, verified on October 1, 2026, with editorial analysis of implications, limitations, and decisions for businesses. The products mentioned have not been tested by Daillac for this article.

Share