Hi everyone,
I’m trying to figure out the correct GDPR-compliant way to handle HubSpot cookies on our website, especially related to embedded forms.
We know that HubSpot’s hubspotutk cookie tracks visitor identity and session information. However, other community posts say that forms and embedded forms will work fine even if cookies are rejected, and that hubspotutk is mainly used for pre-populating forms.
Does anyone know how I can get Hubspot forms to load regardless of the user consenting to Tracking/Statistical cookies?
The hubspotutk cookie is mainly used for tracking visitors things like identifying returning users and pre-filling forms but it’s not essential for the form to load or submit. In most cases, HubSpot forms should still load even if the user rejects cookies. That said, if your cookie consent tool is blocking the entire HubSpot script until tracking consent is given, it can prevent the form from loading altogether. To fix this, you’ll want to make sure your consent tool is set up to allow the HubSpot form embed code to run under a “necessary” or “functional” category, while only blocking tracking cookies like hubspotutk under “marketing” or “analytics.” You can aslo load the form using the HubSpot Forms API after the page loads, so it bypasses the cookie restriction.
Does anyone else find this problematic? If the hubspot script is all or nothing then at least part of it acts as an analytics, if not actually and advertising tracking script. If you bypass consent to allow it to always load or designate it as necessary or functional aren’t you in violation of GDPR?
We have just build a new homepage in Wordpress, trying to integrate hubspot forms. But without cookies we cannot show the form. Already reCaptcha requires cookies. A more modern spam protection would be great to see on hubspot.