topic Re: Disable Hubspot tracking code with Wordpress plugin in CMS Development

Disable Hubspot tracking code with Wordpress plugin

tvaudelin — Fri, 06 Aug 2021 07:50:52 GMT

Hi there !

We are currently using the Hubspot Wordpres plugin for tracking and embed forms into our pages/posts.

As the HubSpot cookie settings banner did not suit us (this is not the discussion here please), we decided to implement a third party tool to manage cookies through GTM called "Axeptio".

The issue :

Since the wordpress plugin inserts the tracking code automatically, I cannot enable it only if the user accepts the HubSpot tracking cookies which causes our website to not follow GDPR rules.

The questions :

Is there a way to programmatically disable HubSpot tracking when using the Wordpress plugin while keeping the use of forms ?
Is there a way to implement HubSpot forms into our websites without the Wordpress plugin ? (so that I can manually implement the tracking code through GTM).

I'm open to any alternatives if anybody has had this issue in the past.

Thanks in advance,

Thibault

Re: Disable Hubspot tracking code with Wordpress plugin

Teun — Fri, 06 Aug 2021 08:32:21 GMT

Hi @tvaudelin, here is some documentation about the tracking script. You can use Javascript to revoke all tracking with _hsq.push(['doNotTrack']);. Sadly, this also blocks anonymized data. You can read more about this specific cookie here: https://legacydocs.hubspot.com/docs/methods/tracking_code_api/place_do_not_track_cookie.

You can reenable tracking again by removing the added __hs_do_not_track cookie and refresh the page.

Re: Disable Hubspot tracking code with Wordpress plugin

tvaudelin — Fri, 06 Aug 2021 09:58:50 GMT

Perfect, solved my problem, thanks @TE !

For anyone trying to fix the same thing, I created a two new tags on GTM: one that enables the "doNotTrack" cookie when axeptio returns the enable event and the second one that disables it when axeptio returns the disable event.

Problem solved !

Re: Disable Hubspot tracking code with Wordpress plugin

SRicca — Fri, 27 Aug 2021 11:05:26 GMT

Please, could you provide us the correct GTM codes?

Many thanks

Re: Disable Hubspot tracking code with Wordpress plugin

tvaudelin — Fri, 27 Aug 2021 12:50:21 GMT

Hey @SRicca,

Here is the code I ended up using. Simple and works like a charm !

If cookie is refused (disable tracking) :

If cookie is accepted (re-enable tracking) :

Hope it helps !

Re: Disable Hubspot tracking code with Wordpress plugin

CStefan — Sun, 14 Nov 2021 21:06:34 GMT

Hello. Are you sure that pushing the __do_not_track cookie works and Hubspot doesn't add the rest of their cookies?

For example, we've tried to programatically set the `__hs_do_not_track` and `__hs_opt_out` cookies with `yes` value, before we inject the `js.hs-scripts.com`. This works good if the cookie policy banner is enabled in the Hubspot Settings. However, if we disable the cookie policy from there (so we don't show Hubspot's banner), Hubspot's script doesn't seem to respect those values and fills in the browser with the tracking cookies. And if we keep it enabled, then how do we start tracking afterwards, without refreshing the page?

Re: Disable Hubspot tracking code with Wordpress plugin

RvanBakel — Wed, 08 Dec 2021 10:13:32 GMT

Hi Teun,

I've tried your solution, what would work perfect for our case.

I've implemented all of it in GTM and our custom cookie consent banner and what it does, is that it places an extra Hubspot cookie __hs_do_not_track. This cookie is placed on the very first event that happens when a new visitor comes to our website. Though this cookie is in place a.s.a.p., other cookies of Hubspot (like hubspotutk, __hssc, etc.) are still placed.

Is it correct that these cookies are still placed, but the cookie __hs_do_not_track prevents sending data to Hubspot? Or is something going wrong with my implementation?

If it is correct that cookies are still being placed, but don't send data, it's still not GDPR proof as I understand.

Thanks for your answer!

Re: Disable Hubspot tracking code with Wordpress plugin

Teun — Wed, 08 Dec 2021 11:22:58 GMT

Hi @RvanBakel ,

The cookies will still be placed, but no longer collect any data. I suppose, because they no longer have tracking functionality, you can categorize these cookies as 'functional' cookies. However, I would like to advice you to discuss this with someone with a bit more legal knowledge.

Re: Disable Hubspot tracking code with Wordpress plugin

CStefan — Wed, 08 Dec 2021 11:58:19 GMT

Hi @Teun ,

I've tested your assumption and unfortunately doesn't seem to be true. Even though we've set up the __hs_do_not_track, Hubspot's scripts still send tracking requests, including identification and the above mentioned cookies:

I'm wondering why isn't this a bug, since it works correctly (i.e. doesn't place cookies and doesn't send tracking requests) if the Hubspot's cookie banner is enabled, but doesn't work correctly (places cookies and sends tracking information) if the cookie banner is disabled.

Re: Disable Hubspot tracking code with Wordpress plugin

Teun — Wed, 08 Dec 2021 12:05:57 GMT

Hi @CStefan ,

Do you place the do_not_track cookie using the tracking code API?

_hsq.push(['doNotTrack']);

If this is placed directly when the page is loaded, it should prevent any data from being sent according to the docs. If this is not the case, this sounds like a major bug.

Re: Disable Hubspot tracking code with Wordpress plugin

CStefan — Wed, 08 Dec 2021 12:30:28 GMT

Yes, We are including the following script tag (for testing purpose) before loading the hs-scripts:

Re: Disable Hubspot tracking code with Wordpress plugin

CStefan — Wed, 08 Dec 2021 14:07:22 GMT

As such, my theory is that there's a serious bug regarding this somewhere in the hubspot script, especially since it has a different behaviour based on whether the cookie banner is enabled or not. Unfortunately, I couldn't find any place to report this as a bug, so it would be great if you could report it.

PS: I believe this is a quite serious issue, because other customers might just be trusting the docs and not verifying the results, thus believing they are GDPR compliant, while they are not really compliant and breaking the regulations.

Re: Disable Hubspot tracking code with Wordpress plugin

Teun — Wed, 08 Dec 2021 17:58:52 GMT

Could it be that executing the script before loading the tracking script is causing the issue? Is the cookie placed with the code you're using?

Re: Disable Hubspot tracking code with Wordpress plugin

CStefan — Wed, 08 Dec 2021 22:37:40 GMT

I'm sorry, but I didn't understand what you meant. What I'm doing is:
1. run the script above, pushin "doNotTrack" into `window.hsq`.
2. load the `<script src="https://js.hs-scripts.com/xxx.js" type="text/javascript"></script>` tag, loading Hubspot script;
3. check out storage, noticing the `hubspotutk`, `__hssc` etc. cookies, and check out network requests, noticing tracking calls such as the ones I linked above.

I'll try to replicate this in a very very simple sample app.

Re: Disable Hubspot tracking code with Wordpress plugin

CStefan — Wed, 08 Dec 2021 23:12:57 GMT

@Teun, I've made a very very simple test app: https://hubspotisnotgdprcompliant.web.app/. It only contains pushing the `doNotTrack` and then loading the Hubspot script. Please load the page and notice:
1. `doNotTrack` was loaded, as the __hs_do_not_track was placed automatically by HS script;

2. tracking cookies were placed, containing unique user identifier (`hubspotutk`, `__hssc` , etc.);

3. tracking calls are being made, containing the above unique user identifier, for example:

Re: Disable Hubspot tracking code with Wordpress plugin

Teun — Thu, 09 Dec 2021 07:08:41 GMT

Hi @CStefan ,

Thank you for testing this so thoroughly. This is definitely not the behaviour I expected from the __hs_do_not_track cookie. The only thing I can imagine is that it prevents the tracking data from getting associated with a specific contact.

@dennisedson Could you verify this for me?

Re: Disable Hubspot tracking code with Wordpress plugin

CStefan — Sun, 12 Dec 2021 20:29:47 GMT

Hi. Do you have any updates on this topic?