Does the _hjSessionUser_ cookie need consent?

Usually yes. _hjSessionUser_ is a functional cookie, and unless it is strictly necessary for a feature the visitor asked for, it needs consent before it is set.

How long does the _hjSessionUser_ cookie last?

_hjSessionUser_ usually lasts 365 days. The exact lifetime depends on the site's settings and the version of the script that sets it.

Who sets the _hjSessionUser_ cookie?

_hjSessionUser_ is set by Hotjar. It is in the Functional category.

How do I block or delete the _hjSessionUser_ cookie?

Visitors can delete _hjSessionUser_ in their browser's cookie settings. On your own website, a consent banner can keep the script that sets it waiting until the visitor accepts functional cookies. Kukie.io's banner does this for known trackers by default, and for any other script you tag with its category.

Functional

_hjSessionUser_ cookie

Set by Hotjar.

_hjSessionUser_*

What it does

Hotjar cookie that is set when a user first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.

Cookie name: _hjSessionUser_
Category: Functional
Provider: Hotjar
Vendor: Hotjar
Duration: 365 days
Name pattern: ^_hjSessionUser_
Data source: Open Cookie Database (opens in a new tab)

Consent

Usually needed

_hjSessionUser_ is in the Functional category. Functional cookies usually need the visitor's consent, unless the cookie is strictly necessary for something the visitor asked for, such as remembering a language they just chose.

GDPR and ePrivacy (EU): Consent is needed before setting _hjSessionUser_, unless it is strictly necessary for a feature the visitor asked for, such as remembering a language they just chose.
UK GDPR and PECR: The same as in the EU: consent first, unless the cookie qualifies for the strictly necessary exemption.
CCPA and CPRA (California): Disclose _hjSessionUser_ in your privacy policy. If the data it stores is shared with third parties, honour opt-out requests, including the Global Privacy Control signal.

Managing _hjSessionUser_ with a consent banner

A consent banner can keep the script that sets _hjSessionUser_ waiting until the visitor accepts functional cookies. Kukie.io's cookie scanner finds _hjSessionUser_ and sorts it into a category. The banner holds back known trackers by default, and any other script you tag with its category waits too.

Learn more about script blocking

Related cookies