| Cookie | Type | Duration | Description |
|---|---|---|---|
| __cfduid | necessary | Max 30 days | This cookie is set by HubSpot’s CDN provider, Cloudflare. It helps Cloudflare detect malicious visitors to your website and minimizes blocking legitimate users. It may be placed on your visitors’ devices to identify individual clients behind a shared IP address and apply security settings on a per-client basis. It is necessary for supporting Cloudflare’s security features. Learn more about this cookie from Cloudflare. |
| __cfruid | necessary | Session | This cookie is set by HubSpot’s CDN provider because of their rate limiting policies. |
| __hs_cookie_cat_pref | necessary | 13 months | This cookie is used to record the categories a visitor consented to. It contains data on the consented categories. |
| __hs_do_not_track | necessary | 13 months | This cookie can be set to prevent the tracking code from sending any information to HubSpot. Setting this cookie is different from opting out of cookies, as it still allows anonymized information to be sent to HubSpot. It contains the string “yes”. |
| __hs_initial_opt_in | necessary | 7 days | This cookie is used to prevent the banner from always displaying when visitors are browsing in strict mode. It contains the string “yes” or “no”. |
| __hs_opt_out | necessary | 13 months | This cookie is used by the opt-in privacy policy to remember not to ask the visitor to accept cookies again. This cookie is set when you give visitors the choice to opt out of cookies. It contains the string “yes” or “no”. |
| __hssc | non-necessary | 30 minutes | This cookie keeps track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp. |
| __hssrc | non-necessary | Session | Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session. It contains the value “1” when present. |
| __hstc | non-necessary | 13 months | The main cookie for tracking visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). |
| __stripe_mid | necessary | 11 months | This cookie is set by Stripe payment gateway. This cookie is used to enable payment on the website without storing any payment information on a server. |
| __stripe_sid | necessary | 30 minutes | This cookie is set by Stripe payment gateway. This cookie is used to enable payment on the website without storing any payment information on a server. |
| _ga | non-necessary | 2 years | Used by Google Analytics to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. Stores information anonymously and assigns a randomly generated number to identify unique visitors. |
| _gat | non-necessary | 1 minute | This cookie is installed by Google Universal Analytics to throttle the request rate to limit the collection of data on high traffic sites. |
| _gid | non-necessary | 1 day | This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected includes the number of visitors, the source where they have come from, and the pages visited in an anonymous form. |
| _hjAbsoluteSessionInProgress | non-necessary | 30 minutes | This cookie is used to detect the first pageview session of a user. This is a True/False flag set by the cookie. |
| _hjCachedUserAttributes | non-necessary | Session | This cookie stores User Attributes which are sent through the Hotjar Identify API, whenever the user is not in the sample. These attributes will only be saved if the user interacts with a Hotjar Feedback tool. |
| _hjClosedSurveyInvites | non-necessary | 1 year | Hotjar cookie that is set once a visitor interacts with an External Link Survey invitation modal. It is used to ensure that the same invite does not reappear if it has already been shown. |
| _hjDonePolls | non-necessary | 1 year | Hotjar cookie that is set once a visitor completes a survey using the On-site Survey widget. It is used to ensure that the same survey does not reappear if it has already been filled in. |
| _hjid | non-necessary | 1 year | Hotjar cookie that is set when the customer first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID. |
| _hjIncludedInPageviewSample | necessary | 30 minutes | This cookie is set to let Hotjar know whether that visitor is included in the data sampling defined by your site’s pageview limit. |
| _hjIncludedInSessionSample | non-necessary | 30 minutes | This cookie is set to let Hotjar know whether that visitor is included in the data sampling defined by your site’s daily session limit. |
| _hjLocalStorageTest | non-necessary | Under 100ms | This cookie is used to check if the Hotjar Tracking Script can use local storage. If it can, a value of 1 is set in this cookie. The data stored in_hjLocalStorageTest has no expiration time, but it is deleted almost immediately after it is created. |
| _hjMinimizedPolls | non-necessary | 1 year | Hotjar cookie that is set once a visitor minimizes an On-site Survey widget. It is used to ensure that the widget stays minimized when the visitor navigates through your site. |
| _hjRecordingLastActivity | non-necessary | Session | This should be found in Session storage (as opposed to cookies). This gets updated when a visitor recording starts and when data is sent through the WebSocket (the visitor performs an action that Hotjar records). |
| _hjShownFeedbackMessage | non-necessary | 1 year | Hotjar cookie that is set when a visitor minimizes or completes Incoming Feedback. This is done so that the Incoming Feedback will load as minimized immediately if the visitor navigates to another page where it is set to show. |
| _hjTLDTest | non-necessary | Session | When the Hotjar script executes we try to determine the most generic cookie path we should use, instead of the page hostname. This is done so that cookies can be shared across subdomains (where applicable). To determine this, we try to store the _hjTLDTest cookie for different URL substring alternatives until it fails. After this check, the cookie is removed. |
| _hjUserAttributesHash | non-necessary | Session | User Attributes sent through the Hotjar Identify API are cached for the duration of the session in order to know when an attribute has changed and needs to be updated. |
| campaignMonitorViewedIds | necessary | Session | This cookie is used to check a Campaign Monitor integrated form for status. |
| cookie_settings_viewed | necessary | 1 month | This cookie is used to manage cookie settings. |
| cookielawinfo-checkbox-necessary | necessary | 1 month | Records the default button state of the corresponding category. It works only in coordination with the viewed_cookie_policy. |
| cookielawinfo-checkbox-non-necessary | necessary | 1 month | Records the default button state of the corresponding category. It works only in coordination with the viewed_cookie_policy cookie. |
| hs_ab_test | necessary | Session | This cookie is used to consistently serve visitors the same version of an A/B test page they’ve seen before. It contains the id of the A/B test page and the id of the variation that was chosen for the visitor. |
| hs_langswitcher_choice | necessary | Two years | This cookie is used to save the visitor’s selected language choice when viewing pages in multiple languages. It gets set when an end user selects a language from the language switcher and is used as a language preference to redirect them to sites in their chosen language in the future, if they are available. It contains a colon delimited string with the ISO639 language code choice on the left and the top level private domain it applies to on the right. An example will be “EN-US:hubspot.com”. |
| hs-membership-csrf | necessary | Session | This cookie is used to ensure that content membership logins cannot be forged. It contains a random string of letters and numbers used to verify that a membership login is authentic. |
| hs-messages-hide-welcome-message | necessary | 1 day | This cookie is used to prevent the chat widget welcome message from appearing again for one day after it is dismissed. It contains a boolean value of True or False. |
| hs-messages-is-open | necessary | 30 minutes | This cookie is used to determine and save whether the chat widget is open for future visits. It is set in your visitor’s browser when they start a new chat, and resets to re-close the widget after 30 minutes of inactivity. It contains a boolean value of True if present. |
| hubspotutk | non-necessary | 13 months | This cookie keeps track of a visitor’s identity. It is passed to HubSpot on form submission and used when deduplicating contacts. It contains an opaque GUID to represent the current visitor. |
| id_key | necessary | 14 days | When visiting a password-protected page, this cookie is set so future visits to the page from the same browser do not require login again. The cookie name is unique for each password-protected page. It contains an encrypted version of the password so future visits to the page will not require the password again. |
| player / vuid | necessary | 1 day / 1 year | When you press play Vimeo will drop third party cookies to enable the video to play and to collect analytics data such as how long a viewer has watched the video. These cookies do not track individuals. |
| Various (cookie uses school name, e.g. dovetree-school) | necessary | Session or 1 year depending on user choice | These cookies have been added specifically for Witherslack Group on our schools’ websites to prevent partner schools’ messages showing every time someone visits a school site. No personal information is stored. |
| viewed_cookie_policy | necessary | 1 month | Records user consent for the usage of cookies upon accept and reject. It doesn’t track any personal data and is set only upon user action (accept/reject). |
| YouTube cookies | necessary | Any YouTube videos use YouTube’s privacy-enhanced mode. This may set cookies on your computer once you click on the YouTube video player, but YouTube will not store personally-identifiable cookie information. Read more at YouTube’s embedding videos information page. |
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that are not necessary for the website to function are termed as non-necessary cookies. However, we set optional analytical cookies to help us ensure we work to provide the type of content which our visitors are most interested in. We believe these to be essential and non-invasive, but as it is mandatory to procure user consent prior to running these cookies we provide the option for you to select these to be turned off.
