GDPR Cookie Reference
Look up any tracking cookie to find out what it does, who sets it, and whether it requires GDPR consent on your website.
Necessary — no consent neededFunctional — consent requiredAnalytics — consent requiredMarketing — consent required
HubSpot
| hubspotutk | marketing | 13 months |
| __hstc | analytics | 13 months |
Hotjar
| _hjid | analytics | 1 year |
| _hjSessionUser | analytics | 1 year |
Google DoubleClick
| IDE | marketing | 2 years |
| test_cookie | marketing | 15 minutes |
YouTube
| YSC | functional | Session |
| VISITOR_INFO1_LIVE | marketing | 6 months |
TikTok Pixel
| _ttp | marketing | 13 months |
| _pin_unauth | marketing | 1 year |
Stripe
| _stripe_mid | necessary | 1 year |
Cloudflare
| __cf_bm | necessary | 30 minutes |
| cf_clearance | necessary | 30 minutes |
Laravel
| laravel_session | necessary | Session |
| XSRF-TOKEN | necessary | Session |
| remember_web_* | functional | 30 days |
WordPress / WooCommerce
| wordpress_logged_in_* | necessary | Session |
| wp-settings-* | functional | 1 year |
| comment_author_* | functional | 1 year |
| woocommerce_cart_hash | necessary | Session |
| woocommerce_items_in_cart | necessary | Session |
| wp_woocommerce_session_* | necessary | 2 days |
| woocommerce_recently_viewed | functional | Session |
Shopify
| _shopify_y | analytics | 1 year |
| _shopify_s | analytics | 30 minutes |
| _shopify_sa_t | marketing | 30 minutes |
| _shopify_sa_p | marketing | 30 minutes |
| _shopify_fs | analytics | 1 year |
| cart | necessary | 2 weeks |
| secure_customer_sig | necessary | 1 year |
| _orig_referrer | analytics | 2 weeks |
| _landing_page | analytics | 2 weeks |
Magento
| MAGE_CACHE_SESSID | necessary | Session |
| form_key | necessary | Session |
| mage-messages | functional | 1 year |
| recently_viewed_product | functional | 1 year |
| mage-cache-storage | necessary | 1 year |
PrestaShop
| PrestaShop-* | necessary | Session |
| id_guest | functional | 1 year |
| id_wishlist | functional | 1 year |
BigCommerce
| SHOP_SESSION_TOKEN | necessary | Session |
| bc_lastview | functional | 1 year |
NextAuth.js (Auth.js)
| next-auth.session-token | necessary | 30 days |
| next-auth.csrf-token | necessary | Session |
| next-auth.callback-url | necessary | Session |
Stripe (additional)
| _stripe_sid | necessary | 30 minutes |
| m | necessary | 2 years |
PayPal
| PYPF | necessary | Session |
| nsid | necessary | Session |
| ts_c | necessary | 3 years |
| cookie_prefs | functional | 10 years |
PostHog
| ph_* | analytics | 1 year |
| __ph_opt_in_out_* | necessary | 1 year |
Amplitude
| amplitude_id_* | analytics | 10 years |
| amplitude_session_id_* | analytics | Session |
Heap Analytics
| _hp2_id.* | analytics | 13 months |
| _hp2_props.* | analytics | 13 months |
Reddit Pixel
| _rdt_uuid | marketing | 90 days |
Snapchat Pixel
| _scid | marketing | 395 days |
Zendesk
| __zlcid | functional | Session |
| __zd_ref_path | functional | Session |
| _help_center_session | functional | Session |
Tawk.to
| twk_idm_key | functional | Session |
| twk_uuid_* | functional | 6 months |
Drift
| driftt_aid | functional | 2 years |
| driftt_sid | functional | Session |
Klaviyo
| __kla_id | marketing | 2 years |
Mailchimp
| MCPopupClosed | functional | 30 days |
| MCPopupSubscribed | functional | 1 year |
Intercom
| intercom-id-* | functional | 9 months |
| intercom-session-* | functional | 1 week |
Crisp
| crisp-client/session/* | functional | 6 months |
LiveChat
| __lc.visitor_id.* | functional | 2 years |
| __lc_cid | functional | 2 years |
| __lc_cst | functional | 2 years |
| __lc2_cid | functional | 2 years |
| __lc2_cst | functional | 2 years |
Freshchat / Freshdesk
| fc_* | functional | Session |
| _fbp_freshdesk | functional | Session |
| freshdesk_* | functional | Session |
Tidio
| tidio_state | functional | Session |
| tidio_chat_* | functional | 1 year |
| tidio_operator | functional | Session |
Chatra
| chatra_* | functional | 1 year |
Smartsupp
| ssupp.vid | functional | 3 years |
| ssupp.visits | analytics | 3 years |
| ssupp.opened | functional | Session |
LiveAgent
| PHPSESSID | necessary | Session |
| la_visitor_id | functional | 1 year |
| la_chat_open | functional | Session |
Help Scout Beacon
| hs-beacon-open | functional | Session |
| __hs_opt_out | necessary | 13 months |
| __hs_do_not_track | necessary | 13 months |
Zoho SalesIQ
| zoho_salesiq_* | functional | 1 year |
| zld* | functional | 1 year |
JivoChat
| jivochat_* | functional | 1 year |
| jivo_* | functional | 1 year |
Facebook Messenger (Chat Plugin)
| xs | functional | 90 days |
| c_user | functional | 90 days |
| sb | functional | 2 years |
| datr | marketing | 2 years |
HubSpot Chat
| __hssrc | functional | Session |
| __hssc | analytics | 30 minutes |
| messagesUtk | functional | 13 months |
Datafast
| datafast_visitor_id | analytics | 1 year |
| datafast_session_id | analytics | Session |
Consent Management Platforms
| OptanonConsent | necessary | 1 year |
| OptanonAlertBoxClosed | necessary | 1 year |
| euconsent-v2 | necessary | 1 year |
| CookieConsent | necessary | 1 year |
| cookieyes-consent | necessary | 1 year |
| borlabs-cookie | necessary | 1 year |
Google reCAPTCHA
| _GRECAPTCHA | functional | 6 months |
Google Account & Services
| CONSENT | necessary | 2 years |
| SOCS | necessary | 13 months |
| AEC | necessary | 6 months |
| 1P_JAR | marketing | 1 month |
| SAPISID | marketing | 2 years |
| APISID | marketing | 2 years |
| __Secure-3PSID | marketing | 2 years |
YouTube (account & embeds)
| PREF | functional | 8 months |
| LOGIN_INFO | marketing | 2 years |
Microsoft Advertising (Bing UET)
| MUID | marketing | 13 months |
| _uetsid | marketing | 1 day |
| _uetvid | marketing | 13 months |
| ANONCHK | marketing | 10 minutes |
| MR | marketing | 7 days |
Hotjar (session)
| _hjFirstSeen | analytics | Session |
| _hjAbsoluteSessionInProgress | analytics | 30 minutes |
| _hjTLDTest | analytics | Session |
LinkedIn Insight Tag
| UserMatchHistory | marketing | 30 days |
| AnalyticsSyncHistory | marketing | 30 days |
| li_gc | marketing | 6 months |
Twitter / X (embeds)
| personalization_id | marketing | 2 years |
| guest_id | marketing | 2 years |
Segment
| ajs_anonymous_id | analytics | 1 year |
| ajs_user_id | analytics | 1 year |
Marketo
| _mkto_trk | marketing | 2 years |
Vimeo
| vuid | analytics | 2 years |
Pinterest Tag
| _epik | marketing | 1 year |
Snapchat (Snap Pixel)
| sc_at | marketing | 1 year |
Cloudflare (load balancing)
| __cflb | necessary | 1 day |
Razorpay
| rzp_unified_session_id | necessary | Session |
| x-session-data | necessary | Session |
| ra_clientId | analytics | 12 months |
| ab_user_id | analytics | 12 months |
| rzp_utm | marketing | 12 months |
Polar
| polar_distinct_id | analytics | 12 months |
Laravel Packages
| laravel_token | necessary | Session |
| laravel_cookie_consent | necessary | 20 years (default) |
See which of these cookies are on your website
Scan any URL to get a full cookie audit — which cookies are set, whether they load before consent, and how to fix compliance issues.
Scan your website free →