ASP.NET determines whether the requesting browser or device supports cookies. If the requesting browser or device supports cookies then HttpCookieMode.AutoDetect uses cookies to persist user data; otherwise, an identifier is used in the query string. If the browser or device supports the use of cookies but cookies are currently disabled, cookies are still used by the requesting feature.