Cookie name

Purpose, recipient

Purpose

Retention period

Type of cookie

__cfruid

Cloudflare (HubSpot CDN)

This cookie is set by HubSpot’s CDN provider because of their rate limiting policie

Session

Necessary

__cfuvid

Cloudflare (HubSpot CDN)

This cookie is set by HubSpot’s CDN provider because of their rate limiting policie

Session

Necessary

__cf_bm

Cloudflare (HubSpot CDN)

Bot protection — This cookie is set by HubSpot's CDN provider and is a necessary cookie for bot protection.

30 minutes

Necessary

__hs_opt_out

HubSpot

Remembers the visitor’s opt-out choice so the consent banner is not shown again.

6 months

Necessary

__hs_do_not_track

HubSpot

This cookie can be set to prevent the tracking code from sending any information to HubSpot.

6 months

Necessary

__hs_initial_opt_in

HubSpot

Prevents the consent banner from displaying repeatedly in strict mode.

7 days

Necessary

__hs_cookie_cat_pref

HubSpot

This cookie is used to record the categories a visitor consented to.

6 months

Necessary

__hs_gpc_banner_dismiss

HubSpot

This cookie is used when the website uses a Notify consent banner type.

180 days

Necessary

hs_ab_test

HubSpot

This cookie is used to consistently serve visitors the same version of an A/B test page they’ve seen before.
It contains the id of the A/B test page and the id of the variation that was chosen for the visitor.

Session

Necessary

hs-messages-is-open

HubSpot

This cookie is used to determine and save whether the chat widget is open for future visits. It is set in your visitor's browser when they start a new chat, and resets to re-close the widget after 30 minutes of inactivity. If your visitor manually closes the chat widget, it will prevent the widget from re-opening on subsequent page loads in that browser session for 30 minutes

30 minutes

Necessary

hs-messages-hide-welcome-message

HubSpot

This cookie is used to prevent the chat widget welcome message from appearing again for one day after it is dismissed.

1 day

Necessary

__hsmem

HubSpot

This cookie is set when visitors log in to a HubSpot-hosted site.
It contains encrypted data that identifies the membership user when they are currently logged in.

7 days

Necessary

hs-membership-csrf

HubSpot

Security token that prevents forged membership login requests (CSRF protection).

Session

Necessary

HubSpot

This cookie is set when visitors log out of HubSpot-hosted sites.

It contains the value of the Referer header in the visitor's browser at the time of logout. This is the URL of the page the visitor was previously on before they logged out.

one hour or when the visitor logs in to a HubSpot-hosted site

Necessary

HubSpot

It contains an offline cache of cohorts that a user was assigned for HubSpot product experiments. It does not contain personally identifiable information or any data that can identify your device or hardware. HubSpot experiments are anonymous and are not linked to user sessions. However, if tracking consent is given, certain experiments may be associated with identifiable user sessions.

expire automatically upon specific dates determined by HubSpot Product. Often, these are 48 hours.

Necessary

HubSpot

When visiting a password-protected page, this cookie is set so future visits to the page from the same browser do not require login again.

14 days

Necessary

HubSpot

It contains metadata regarding tracking events that HubSpot collects throughout the user's journey at HubSpot.It's stored either on the Browser's Session Storage or Local Storage based on the presence or lack of tracking consent.

It doesn't contain personal identifiable information or information that can identify your device or hardware.

It can't be manually removed and is automatically created whenever conditions are met.

Analytics

HubSpot

This browser storage entry is used by HubSpot Product to temporarily store tracking events created by HubSpot Product until they get dispatched over the network.

It's stored either on the Browser's Session Storage or Local Storage based on the presence or lack of tracking consent. It doesn't contain personal identifiable information or information that can identify your device or hardware.

It can't be manually removed and is automatically created whenever conditions are met.

Analytics

__hstc

HubSpot

The main cookie for tracking visitors.,
It contains the domain, hubspotutk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).

6 months

Analytics

hubspotutk

HubSpot

This cookie keeps track of a visitor's identity. It is passed to HubSpot on form submission and used when deduplicating contacts.

6 months

Analytics

__hssc

HubSpot

This cookie keeps track of sessions.
This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie.
It contains the domain, viewCount (increments each pageView in a session), and session start timestamp.

30 minutes

Analytics

__hssrc

HubSpot

Detects browser restarts to determine whether to start a new session.

Session

Analytics