What is the HSID cookie?it needs consent first
Set by Google (Google LLC). Expires after 2 years.
Block it until the visitor opts in
Under the ePrivacy Directive (Art. 5(3)) and GDPR, HSID may only be set after the visitor accepts marketing cookies.
Purpose
Works with SID to verify the visitor's Google account and protect it from unauthorised access; also used for ad personalisation.
Cookie details
- Cookie name
HSID- Service
- Provider
- Google LLC
- Category
- Marketing / Advertising
- Duration
- 2 years
- Consent
- Required — opt-in
GDPR requirements
Marketing cookies are used to track visitors across websites to display relevant advertisements. Consent is required under GDPR.
For HSID to be compliant, it must be:
- Not set on the first visit — not even for a fraction of a second
- A consent banner is shown, and the visitor actively accepts marketing cookies
- Stays blocked if the visitor rejects or ignores the banner
- Listed in your cookie policy with its name, purpose and retention period
- Removed or invalidated when the visitor withdraws consent
How to handle it
- 1Block it by default
Configure your consent platform (CMP) or tag manager so Google doesn't load until the visitor accepts marketing cookies.
- 2Map it to a consent category
Put it under “Marketing / Advertising” in your CMP configuration.
- 3List it in your cookie policy
Name, purpose, provider (Google LLC) and expiry (2 years).
- 4Sign a DPA
Have a Data Processing Agreement with Google LLC covering the data this cookie collects.
- 5Verify it works
In a private window, reject cookies and confirm
HSIDis not set.
Other Google cookies
NIDCONSENTSOCSAEC1P_JARSAPISIDAPISID__Secure-3PSIDSIDSSID__Secure-3PAPISID__Secure-3PSIDCCis HSID on your site?scan it in 2 minutes
Free scan · see every cookie before and after consent