Hubspot Tracking Code

I haven’t seen a fix from Hubspot for their cookies. But now Chrome is blocking the HS cookies:

A cookie associated with a cross-site resource at http://hubspot.com/ was set without the `SameSite` attribute. It has been blocked, as Chrome now only delivers cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at Chrome Platform Status and Chrome Platform Status.

Hey @edthenet , @nateangell , @tinyfly , @geekbleek , @seanvarnham, @eslpics, @kriswen and everyone,

Sincere apologise on the delayed in response.

Just an update, there’s an ongoing discussion with our team on this case and I’ll update this thread once we finalize the information. In the meantime, please share any other concerns here. I’d be happy to address them.

Hey @edthenet , @nateangell , @tinyfly , @geekbleek , @seanvarnham, @eslpics, @kriswen and everyone,

Just an update here!

I have checked in with our team and we’d first like to clarify that the cookies set by HubSpot analytics scripts do now have the SameSite flag set (and have since February). We would not expect users to be seeing that chrome warning specifically about the js.hs-analytics at this point.

The likely root cause here is that users are seeing warnings referring to either hubspot.com or app.hubspot.com related to HubSpot app cookies (such as login/auth cookies which a user would see on their own HubSpot website if they’re logged into HubSpot in that same browser) or possibly cookies related to HubSpot API requests from assets they’ve embedded on their website.

Having said that, HubSpot analytics passes the values we need as query parameters on requests, so because our tracking doesn’t expect the cookie to be present in the header this does not affect our tracking functionality.

Additionally, I’d also like to suggest for you to try loading your website incognito to confirm if you still see those HubSpot warnings or not. If you do not see them in incognito, this can helps confirm that they’re related to being logged into HubSpot, and not related to the website itself.

Do let me know if there’s any further concerns. I’d be happy to address them :slightly_smiling_face:

Hi,

I’m still seeing error with the following “(https://static.hsappstatic.net/conversations-visitor-ui/static-1.9623/bundles/visitor.js:1…”

Hey everyone,

For future reference, you can also visit this article: Cookies set in a visitor’s browser by HubSpot (Specifically the ‘Please note’ box) .