HubSpot main analytics cookie tracking visitors. Contains domain, utk, initial timestamp, last timestamp, current timestamp, and session number.
6 months
HubSpot, Inc.
__hstc is a analytics cookie. Under Art. 5(3) ePrivacy Directive and the GDPR, it must not be set before the visitor has given prior, informed, freely-given consent.
If your scanner finds __hstc on a page before the visitor interacts with your consent banner, that's a violation — the cookie loaded without a legal basis.
Fix: gate the script that sets this cookie behind your CMP, so it only fires after the relevant consent category is accepted.
Run a free CookieSentry scan to find every cookie set before consent — including __hstc — and get a downloadable evidence PDF.
Run a free scan →