AIUI it's not specific to http cookies, but applies to anything being used as a cookie. So flash cookies, html5 local storage etc all count as cookies for the purposes of this rule.