Do not set cookies in your domain. Jokes aside. That is all you have to do.
Just use the subdomain and make sure that you don’t fall into any of your scripting solutions (php, python, whatever) anywhere in this domain. Also, make sure you do not have any lightweight modules that cause the creation of cookies (I'm not sure if they exist or not, but it’s better to check).
source
share