FunctionalConsent required
What is the intercom-session-* Cookie?
Set by Intercom (Intercom, Inc.). Expires after 1 week.
Purpose
Session token for the current Intercom messenger session.
Cookie Details
| Cookie Name | intercom-session-* |
| Service | Intercom |
| Provider | Intercom, Inc. |
| Category | Functional |
| Duration | 1 week |
| Consent Required | Yes — requires explicit opt-in |
Category: Functional
Functional cookies enhance the website's functionality and personalisation. They may be set by us or by third-party providers. Consent is required under GDPR.
GDPR Requirements
Under GDPR and the ePrivacy Directive, the intercom-session-* cookie requires explicit user consent before it can be set. This means:
- The cookie must not be set when a user first visits your site — not even for a fraction of a second
- A consent banner must be displayed, and the user must actively accept analytics/marketing cookies
- If the user rejects or ignores the banner, this cookie must remain blocked
- The cookie must be listed in your cookie policy with its name, purpose, and retention period
- Users must be able to withdraw consent at any time, which must also remove or invalidate this cookie
How to Handle This Cookie
- Block it by default — configure your Consent Management Platform (CMP) or tag manager to prevent Intercom from loading until the user accepts functional cookies.
- Include it in your consent categories — map it to the "Functional" category in your CMP configuration.
- List it in your cookie policy — document the cookie name, purpose, provider (Intercom, Inc.), and expiry (1 week).
- Sign a DPA — ensure you have a Data Processing Agreement with Intercom, Inc. covering their use of data collected via this cookie.
- Verify it works — in an incognito browser, reject cookies and confirm
intercom-session-*is not set.
Other Intercom Cookies
| Cookie | Category | Duration |
|---|---|---|
| intercom-id-* | Functional | 9 months |
Is this cookie on your website?
Scan your website to see every cookie it sets, whether they're blocked before consent, and get a full GDPR compliance report.
Scan your website free →