Last updated: June 28, 2023
Find answers to the most commonly asked questions about website consent management tools in HubSpot.
Please note: while HubSpot provides cookie tracking and consent banner tools, your legal team is the best resource to give you compliance advice for your specific business circumstances. In addition, while these features help to enable compliance, there's no one solution that fits every situation. Learn more in the HubSpot GDPR Playbook.
First-party cookies are set and stored by a website's domain. Often times, these cookies are used to collect analytics data, remember language settings, or store shopping cart contents. Information collected by first-party cookies doesn't leave the website.
Third-party cookies are set by a server outside of the website's domain and are commonly associated with website functionality and ad targeting. Information collected by third-party can be used by companies outside of the website you're visiting.
The HubSpot tracking code script drops first-party cookies. Though the HubSpot tracking code collects data to personalize the site visitor's experience, the data is not shared across websites and it belongs only to your HubSpot account.
Learn more about which cookies HubSpot sets in a visitor's browser.
For HubSpot's consent banner to manage cookies on an external page, your website needs to have the HubSpot tracking code installed. If your account was created after November 2022, you'll first need to add your external domain to your consent management settings.
A consent banner that is configured to target all URLs will load on all pages that contain your HubSpot tracking code. Because an iframe embeds a page within another page, an iframe embedded page with the tracking code is expected to load the consent banner too.
You can resolve this by configuring your consent banner to only appear on specific domains and URLs. Alternatively, you can remove the HubSpot tracking code from the page being loaded in the iframe. Be aware that removing the tracking code will remove tracking capabilities from that page if it's being used elsewhere outside of the iframe.
This issue may occur for a couple reasons:
Unless you're using the Cookiebot integration, managing HubSpot cookies with a third-party banner requires a custom developed setup, such as:
You can use HubSpot's cookie management tools to scan for and block cookies on your website. If you have cookie blocking enabled and continue to notice third-party cookies loading on your website prior to visitor consent, verify that the cookies have been categorized properly within HubSpot's cookie management tools. Necessary cookies always load, while cookies categorized as analytics, functional, or advertisement require visitor consent.
Learn more about customizing your consent banner's settings.