What is the `rzp_utm` Cookie?

Set by Razorpay (Razorpay Software Private Limited). Expires after 12 months.

Purpose

Stores UTM campaign parameters (source, medium, campaign) so Razorpay can attribute sign-ups and conversions to marketing campaigns.

A marketing-attribution cookie; requires consent under GDPR.

Cookie Name	`rzp_utm`
Service	Razorpay
Provider	Razorpay Software Private Limited
Category	Marketing / Advertising
Duration	12 months
Consent Required	Yes — requires explicit opt-in

Marketing cookies are used to track visitors across websites to display relevant advertisements. Consent is required under GDPR.

Under GDPR and the ePrivacy Directive, the rzp_utm cookie requires explicit user consent before it can be set. This means:

The cookie must not be set when a user first visits your site — not even for a fraction of a second
A consent banner must be displayed, and the user must actively accept analytics/marketing cookies
If the user rejects or ignores the banner, this cookie must remain blocked
The cookie must be listed in your cookie policy with its name, purpose, and retention period
Users must be able to withdraw consent at any time, which must also remove or invalidate this cookie

Block it by default — configure your Consent Management Platform (CMP) or tag manager to prevent Razorpay from loading until the user accepts marketing cookies.
Include it in your consent categories — map it to the "Marketing / Advertising" category in your CMP configuration.
List it in your cookie policy — document the cookie name, purpose, provider (Razorpay Software Private Limited), and expiry (12 months).
Sign a DPA — ensure you have a Data Processing Agreement with Razorpay Software Private Limited covering their use of data collected via this cookie.
Verify it works — in an incognito browser, reject cookies and confirm rzp_utm is not set.

Scan your website to see every cookie it sets, whether they're blocked before consent, and get a full GDPR compliance report.