HubSpot sets 5 cookies on websites that load its scripts. Below is the full list with purpose, expiry, and whether each one needs GDPR / ePrivacy consent.
__hstcAnalyticsExpires: 6 monthsHubSpot main analytics cookie tracking visitors. Contains domain, utk, initial timestamp, last timestamp, current timestamp, and session number.
hubspotutkAnalyticsExpires: 6 monthsHubSpot user token. Identifies a unique visitor and is passed to HubSpot on form submission for contact deduplication.
__hsscAnalyticsExpires: 30 minutesHubSpot session cookie. Tracks sessions: incremented on each new pageview within 30 minutes.
__hssrcAnalyticsExpires: SessionHubSpot session-restart flag. Set to 1 when HubSpot detects that the visitor has started a new browser session.
messagesUtkFunctionalExpires: 6 monthsHubSpot Messages identifier. Used by the HubSpot chat widget to recognise returning visitors and continue prior chat threads.
CookieSentry scans your site, identifies every HubSpot cookie set before consent, and gives you an evidence-grade PDF for your DPO.
Run a free scan →