Does the _hjHasCachedUserAttributes cookie need consent?

In the EU and the UK, yes. _hjHasCachedUserAttributes is an analytics cookie, so it may be set only after the visitor agrees. Under the CCPA, California residents can opt out if the data is sold or shared.

How long does the _hjHasCachedUserAttributes cookie last?

_hjHasCachedUserAttributes usually lasts 365 days. The exact lifetime depends on the site's settings and the version of the script that sets it.

Who sets the _hjHasCachedUserAttributes cookie?

_hjHasCachedUserAttributes is set by Hotjar. It is in the Analytics category.

How do I block or delete the _hjHasCachedUserAttributes cookie?

Visitors can delete _hjHasCachedUserAttributes in their browser's cookie settings. On your own website, a consent banner can keep the script that sets it waiting until the visitor accepts analytics cookies. Kukie.io's banner does this for known trackers by default, and for any other script you tag with its category.

Analytics

_hjHasCachedUserAttributes cookie

Set by Hotjar.

What it does

This cookie sets when a user first lands on a page. Persists the Hotjar User ID which is unique to that site. Hotjar does not track users across different sites. Ensures data from subsequent visits to the same site are attributed to the same user ID.

Cookie name: _hjHasCachedUserAttributes
Category: Analytics
Provider: Hotjar
Duration: 365 days
Data source: Open Cookie Database (opens in a new tab)

Consent

Needed in the EU and the UK

_hjHasCachedUserAttributes is in the Analytics category. In the EU and the UK, analytics cookies need the visitor's consent before they are set. California's CCPA works differently: it lets residents opt out of the sale or sharing of their personal information.

GDPR and ePrivacy (EU): Prior consent is needed before setting _hjHasCachedUserAttributes. Analytics cookies are not covered by the strictly necessary exemption; only a few regulators (for example France's CNIL) allow a narrow exemption for first-party audience measurement under strict conditions.
UK GDPR and PECR: Consent is needed before setting _hjHasCachedUserAttributes. The ICO treats analytics cookies as non-essential.
CCPA and CPRA (California): Disclose _hjHasCachedUserAttributes in your privacy policy and honour opt-out requests, including the Global Privacy Control signal, if the analytics data is shared or sold.

Managing _hjHasCachedUserAttributes with a consent banner

A consent banner can keep the script that sets _hjHasCachedUserAttributes waiting until the visitor accepts analytics cookies. Kukie.io's cookie scanner finds _hjHasCachedUserAttributes and sorts it into a category. The banner holds back known trackers by default, and any other script you tag with its category waits too.

Learn more about script blocking

Related cookies