Does the __hssc cookie need consent?

In the EU and the UK, yes. __hssc is an analytics cookie, so it may be set only after the visitor agrees. Under the CCPA, California residents can opt out if the data is sold or shared.

How long does the __hssc cookie last?

__hssc usually lasts 30 minutes. The exact lifetime depends on the site's settings and the version of the script that sets it.

Who sets the __hssc cookie?

__hssc is set by HubSpot. It is in the Analytics category.

How do I block or delete the __hssc cookie?

Visitors can delete __hssc in their browser's cookie settings. On your own website, a consent banner can keep the script that sets it waiting until the visitor accepts analytics cookies. Kukie.io's banner does this for known trackers by default, and for any other script you tag with its category.

Analytics

__hssc cookie

Set by HubSpot.

What it does

Keeps track of sessions for HubSpot analytics.

Cookie name: __hssc
Category: Analytics
Provider: HubSpot
Duration: 30 minutes
Data source: Kukie.io

Consent

Needed in the EU and the UK

__hssc is in the Analytics category. In the EU and the UK, analytics cookies need the visitor's consent before they are set. California's CCPA works differently: it lets residents opt out of the sale or sharing of their personal information.

GDPR and ePrivacy (EU): Prior consent is needed before setting __hssc. Analytics cookies are not covered by the strictly necessary exemption; only a few regulators (for example France's CNIL) allow a narrow exemption for first-party audience measurement under strict conditions.
UK GDPR and PECR: Consent is needed before setting __hssc. The ICO treats analytics cookies as non-essential.
CCPA and CPRA (California): Disclose __hssc in your privacy policy and honour opt-out requests, including the Global Privacy Control signal, if the analytics data is shared or sold.

Managing __hssc with a consent banner

A consent banner can keep the script that sets __hssc waiting until the visitor accepts analytics cookies. Kukie.io's cookie scanner finds __hssc and sorts it into a category. The banner holds back known trackers by default, and any other script you tag with its category waits too.

Learn more about script blocking

Related cookies