Does the _hjCachedUserAttributes cookie need consent?

In the EU and the UK, yes. _hjCachedUserAttributes is an analytics cookie, so it may be set only after the visitor agrees. Under the CCPA, California residents can opt out if the data is sold or shared.

How long does the _hjCachedUserAttributes cookie last?

_hjCachedUserAttributes usually lasts until the browser closes. The exact lifetime depends on the site's settings and the version of the script that sets it.

Who sets the _hjCachedUserAttributes cookie?

_hjCachedUserAttributes is set by Hotjar. It is in the Analytics category.

How do I block or delete the _hjCachedUserAttributes cookie?

Visitors can delete _hjCachedUserAttributes in their browser's cookie settings. On your own website, a consent banner can keep the script that sets it waiting until the visitor accepts analytics cookies. Kukie.io's banner does this for known trackers by default, and for any other script you tag with its category.

Analytics

_hjCachedUserAttributes cookie

Set by Hotjar.

What it does

This cookie stores User Attributes which are sent through the Hotjar Identify API, whenever the user is not in the sample. These attributes will only be saved if the user interacts with a Hotjar Feedback tool.

Cookie name: _hjCachedUserAttributes
Category: Analytics
Provider: Hotjar
Duration: session
Data source: Open Cookie Database (opens in a new tab)

Consent

Needed in the EU and the UK

_hjCachedUserAttributes is in the Analytics category. In the EU and the UK, analytics cookies need the visitor's consent before they are set. California's CCPA works differently: it lets residents opt out of the sale or sharing of their personal information.

GDPR and ePrivacy (EU): Prior consent is needed before setting _hjCachedUserAttributes. Analytics cookies are not covered by the strictly necessary exemption; only a few regulators (for example France's CNIL) allow a narrow exemption for first-party audience measurement under strict conditions.
UK GDPR and PECR: Consent is needed before setting _hjCachedUserAttributes. The ICO treats analytics cookies as non-essential.
CCPA and CPRA (California): Disclose _hjCachedUserAttributes in your privacy policy and honour opt-out requests, including the Global Privacy Control signal, if the analytics data is shared or sold.

Managing _hjCachedUserAttributes with a consent banner

A consent banner can keep the script that sets _hjCachedUserAttributes waiting until the visitor accepts analytics cookies. Kukie.io's cookie scanner finds _hjCachedUserAttributes and sorts it into a category. The banner holds back known trackers by default, and any other script you tag with its category waits too.

Learn more about script blocking

Related cookies