> How the HubSpot cookie consent banner records consent, which cookies it sets and how to configure it for GDPR and ePrivacy compliant opt in. > > Canonical: https://www.flowconsent.com/en/services/consent-management/hubspot-consent-banner Consent management # HubSpot Cookie Consent Banner Essential The HubSpot cookie consent banner is HubSpot built in tool for collecting and recording visitor consent, gating HubSpot analytics and marketing cookies until the visitor agrees. [Block HubSpot Cookie Consent Banner until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=consent) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Consent management](https://www.flowconsent.com/en/services/consent-management) - Consent Essential - Prior consent Not required - Documented cookies 3 - Third-party domains 3 - Servers United States (HubSpot, Inc.), with optional EU data hosting Overview ## What does HubSpot Cookie Consent Banner do? ## **What it is** The HubSpot cookie consent banner is a feature of the HubSpot platform that displays a cookie notice and records visitor choices. It is designed to gate HubSpot own tracking cookies, such as analytics and chat, and can be configured for opt in behaviour suitable for the European Union. The banner stores the visitor decision so it is remembered on later visits. ## **Cookies and data it collects** To remember choices, the banner sets strictly necessary preference cookies such as \_\_hs\_opt\_out and \_\_hs\_cookie\_cat\_pref. These do not track the visitor; they only record whether analytics, personalisation or advertising cookies are allowed. The cookies that the banner controls, such as HubSpot analytics, are the ones that need consent. ## **GDPR and ePrivacy implications** The consent preference cookies are themselves strictly necessary and exempt from consent, because they exist to comply with the consent requirement. The banner helps you meet Article 5(3) of the ePrivacy Directive by blocking non essential HubSpot cookies until the visitor opts in. ## **Consent requirements** Configure the banner for opt in, so HubSpot analytics and marketing cookies are not set until the visitor accepts. Make refusal as easy as acceptance and present granular categories. The banner itself does not require consent, but it must genuinely block the cookies it governs. ## **Data transfers** HubSpot is a United States company, although it offers an EU data hosting region. Where data is processed in the United States, transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses, which you should confirm and note in your privacy policy. ## **Practical compliance steps** Enable opt in consent in the HubSpot settings, verify that HubSpot cookies are actually blocked before acceptance, and document the consent preference cookies as strictly necessary. Confirm your HubSpot data hosting region and the transfer mechanism, and keep records of consent. Compliance ## HubSpot Cookie Consent Banner and the GDPR - Legal basis Legitimate interest or legal obligation for the consent preference cookies, which are strictly necessary to record choices - Risk level low - Applicable regulations GDPR, ePrivacy Directive ### Impact assessment (DPIA) The consent banner itself is low risk and rarely needs a DPIA, since it processes only consent preferences. Any DPIA should focus on the wider HubSpot analytics and marketing it governs, and on the United States transfer. ### Sample text for your banner > We use a cookie banner to ask for your consent. HubSpot analytics and marketing cookies are set only if you accept. A small preference cookie remembers your choice. Cookies and trackers ## What HubSpot Cookie Consent Banner sets and contacts - Tracking method Consent management banner script served by HubSpot - Server location United States (HubSpot, Inc.), with optional EU data hosting - Data transferred outside the EU HubSpot is a US company and the consent banner is served from HubSpot infrastructure. HubSpot offers an EU data hosting region, but data may still be processed in the United States under the EU US Data Privacy Framework or Standard Contractual Clauses. ### Cookies set (3) | Name | Type | Duration | Purpose | | ------------------------- | ------------------ | -------- | -------------------------------------------------------------------------------------------- | | \_\_hs\_opt\_out | Strictly necessary | 6 months | Records that the visitor has declined non essential cookies so the banner does not reappear. | | \_\_hs\_cookie\_cat\_pref | Strictly necessary | 6 months | Stores which categories of cookies the visitor has consented to. | | \_\_hs\_do\_not\_track | Strictly necessary | 6 months | Prevents HubSpot tracking cookies from being set when the visitor has not consented. | ### Third-party domains contacted (3) - `hs-banner.com` - `js.hs-scripts.com` - `hubspot.com` Questions ## Frequently asked questions about HubSpot Cookie Consent Banner Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does the HubSpot consent banner set? It sets strictly necessary preference cookies such as \_\_hs\_opt\_out and \_\_hs\_cookie\_cat\_pref that record the visitor consent choices. These do not track the visitor. ### Do I need consent for the banner itself? No, the consent preference cookies are strictly necessary and exempt, because they exist to comply with the consent requirement. Consent is needed for the HubSpot cookies the banner controls. ### What is the legal basis? The preference cookies rely on legitimate interest or legal obligation, as they are required to honour consent choices. The analytics and marketing cookies they gate rely on consent under Article 6(1)(a). ### Does it transfer data to the United States? HubSpot is a US company and offers an EU hosting region. Where processing happens in the US, it relies on the EU US Data Privacy Framework or Standard Contractual Clauses. ### Do I need a DPIA? The banner itself is low risk, but the broader HubSpot tracking it governs may warrant one. Assess the analytics, the marketing cookies and the US transfer. ### How do I configure it compliantly? Set the banner to opt in, confirm that HubSpot cookies are blocked until acceptance, present granular categories and make refusal easy. Keep records of consent. ### Are there alternatives? Dedicated consent management platforms can manage HubSpot and all other cookies together, which is useful if you use trackers beyond HubSpot. The native banner is convenient for HubSpot only sites. ### How do I update my cookie policy? Describe the consent preference cookies as strictly necessary, explain that non essential HubSpot cookies load only after opt in, and disclose the United States transfer. Same category ## More services: Consent management [See the whole category](https://www.flowconsent.com/en/services/consent-management) ### [Legal Monster](https://www.flowconsent.com/en/services/consent-management/legal-monster) [Legal Monster is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Legal Monster supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Legal Monster ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/legal-monster) [Essential](https://www.flowconsent.com/en/services/consent-management/legal-monster) · ### [Didomi](https://www.flowconsent.com/en/services/consent-management/didomi) [Didomi is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Didomi supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Didomi ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/didomi) [Essential](https://www.flowconsent.com/en/services/consent-management/didomi) · ### [My Agile Privacy](https://www.flowconsent.com/en/services/consent-management/my-agile-privacy) [My Agile Privacy is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. My Agile Privacy manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, My Agile Privacy ensures worldwide privacy compliance.](https://www.flowconsent.com/en/services/consent-management/my-agile-privacy) [Essential](https://www.flowconsent.com/en/services/consent-management/my-agile-privacy) · ### [Privado](https://www.flowconsent.com/en/services/consent-management/privado) [Privado is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Privado integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Privado helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/consent-management/privado) [Essential](https://www.flowconsent.com/en/services/consent-management/privado) · ### [Spatie Laravel Cookie Consent](https://www.flowconsent.com/en/services/consent-management/spatie-laravel-cookie-consent) [Spatie Laravel Cookie Consent is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Spatie Laravel Cookie Consent manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Spatie Laravel Cookie Consent ensures worldwide privacy compliance.](https://www.flowconsent.com/en/services/consent-management/spatie-laravel-cookie-consent) [Essential](https://www.flowconsent.com/en/services/consent-management/spatie-laravel-cookie-consent) · ### [ComplyAuto](https://www.flowconsent.com/en/services/consent-management/complyauto) [ComplyAuto is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ComplyAuto supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ComplyAuto ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/complyauto) [Essential](https://www.flowconsent.com/en/services/consent-management/complyauto) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)