Name: CraftSessionId

Description: Craft relies on PHP sessions to maintain sessions across web requests. That is done via the PHP session cookie. Craft names that cookie “CraftSessionId” by default, but it can be renamed via the phpSessionId config setting. This cookie will expire as soon as the session expires.

Provider: this site

Expiry: Session

Name: *_identity

Description: When you log into the Control Panel, you will get an authentication cookie used to maintain your authenticated state. The cookie name is prefixed with a long, randomly generated string, followed by _identity. The cookie only stores information necessary to maintain a secure, authenticated session and will only exist for as long as the user is authenticated in Craft.

Provider: this site

Expiry: Persistent

Name: *_username

Description: If you check the "Keep me logged in" option during login, this cookie is used to remember the username for your next authentication.

Provider: this site

Expiry: Persistent

Name: CRAFT_CSRF_TOKEN

Description: Protects us and you as a user against Cross-Site Request Forgery attacks.

Provider: this site

Expiry: Session

Name: _ga

Description: This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners.

Provider: Google Analytics

Expiry: 2 years

Name: _gid

Description: This cookie name is associated with Google Analytics. It is used by gtag.js and analytics.js scripts and according to Google Analytics this cookie is used to distinguish users.

Provider: Google Analytics

Expiry: 1 day

Name: _gat_*

Description: This cookies is used to read and filter requests from bots.

Provider: Google Analytics

Expiry: 1 minute

Name: _gcl_au

Description: This cookie name is associated with Google Adsense. It is used to store and track conversions.

Provider: Google Adsense

Expiry: Persistent

Name: _hjSession_*

Description: This cookie ensures subsequent requests in the session window are attributed to the same session.

Provider: Hotjar

Expiry: 30 minutes

Name: _hjSessionUser_*

Description: This cookie persists the Hotjar User ID which is unique to that site. Hotjar does not track users across different sites.

Provider: Hotjar

Expiry: 1 year

Name: _fbp

Description: This cookie is used to store and track visits across websites.

Provider: Facebook

Expiry: 3 months