Cookies Policy
NOTEDFIRST SEEN 2026-08-14 · VERSION 20260814_rev01 · COMPARED WITH 20260813_rev01
What changed, in plain language
Nothing about PLOS's cookie practices changed. The only difference is in the scrambled codes behind the "email protected" links for HubSpot and Cloudflare contact addresses — these are rotated automatically by Cloudflare's email-hiding tool. Every cookie, provider, purpose, and storage period is identical to the previous version.
This change appears to be cosmetic (formatting, typos, or contact details).
Changelog
- ± CHANGEDHidden email link codes were refreshed
The links that hide HubSpot's and Cloudflare's contact email addresses from spam bots now use different scrambled codes. The email addresses themselves, and everything else on the page, stayed the same.
HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#1c6c6e756a7d7f655c74697e6f6c7368327f7371)
HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#50202239263133291038253223203f247e333f3d)
Full text changes — 20260813_rev01 to 20260814_rev01
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 35 | 35 | | \_cer.v | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | Up to 31 Days | Tracks whether a visitor has visited the site before. | |
| 36 | 36 | | \_ce.s | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Year | Tracks a recording visitor session unique ID, host, and start time. | |
| 37 | 37 | | \_ce.cch | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Second | Used to check if cookies can be added. | |
| 38 | 38 | | \_ce.gtld | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Second | Used to identify the top-level domain. | |
| 39 | 39 | | ce\_need\_secure\_cookie | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Second | Used to determine cookie security parameters. | |
| 40 | 40 | | ce\_successful\_csp\_check | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 24 Hours | Determines if the page has a Content Security Policy rule that would prevent tracking. | |
| 41 | | \_\_hs\_opt\_out | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#1c6c6e756a7d7f655c74697e6f6c7368327f7371) | Necessary | 6 month | This cookie is used by the opt-in privacy policy to remember not to ask the visitor to accept cookies again. | | |
| 42 | | \_\_hs\_do\_not\_track | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#cdbdbfa4bbacaeb48da5b8afbebda2b9e3aea2a0) | Necessary | 6 month | This cookie can be set to prevent the tracking code from sending any information to HubSpot. | | |
| 43 | | \_\_hs\_initial\_opt\_in | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#48383a213e292b3108203d2a3b38273c662b2725) | Necessary | 7 days | This cookie is used to prevent the banner from always displaying when visitors are browsing in strict mode. | | |
| 41 | | \_\_hs\_opt\_out | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#50202239263133291038253223203f247e333f3d) | Necessary | 6 month | This cookie is used by the opt-in privacy policy to remember not to ask the visitor to accept cookies again. | | |
| 42 | | \_\_hs\_do\_not\_track | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#3a4a48534c5b59437a524f58494a554e14595557) | Necessary | 6 month | This cookie can be set to prevent the tracking code from sending any information to HubSpot. | | |
| 43 | | \_\_hs\_initial\_opt\_in | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#cebebca7b8afadb78ea6bbacbdbea1bae0ada1a3) | Necessary | 7 days | This cookie is used to prevent the banner from always displaying when visitors are browsing in strict mode. | | |
| 44 | 44 | | \_\_hs\_cookie\_cat\_pref | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#e9999b809f888a90a9819c8b9a99869dc78a8684) | Necessary | 6 months | This cookie is used to record the categories a visitor consented to. | |
| 45 | | \_\_hs\_gpc\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#93e3e1fae5f2f0ead3fbe6f1e0e3fce7bdf0fcfe) | Necessary | 180 days | This cookie is used when the Global Privacy Control banner is dismissed. | | |
| 46 | | \_\_hs\_notify\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#c5b5b7acb3a4a6bc85adb0a7b6b5aab1eba6aaa8) | Necessary | 180 days | This cookie is used when the website uses a Notify consent banner type. | | |
| 47 | | hs\_ab\_test | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#e797958e9186849ea78f928594978893c984888a) | Necessary | End of the session | This cookie is used to consistently serve visitors the same version of an A/B test page they've seen before. | | |
| 48 | | \_key | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#7a0a08130c1b19033a120f18090a150e54191517) | Necessary | 14 days | When visiting a password-protected page, this cookie is set so future visits to the page from the same browser do not require login again. | | |
| 49 | | \_\_hsmem | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA[\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#2e5e5c47584f4d576e465b4c5d5e415a004d4143) | Necessary | 7 days | This cookie is set when visitors log in to a HubSpot-hosted site. It contains encrypted data that identifies the membership user when they are currently logged in. | | |
| 50 | | hs-membership-csrf | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#bacac8d3ccdbd9c3fad2cfd8c9cad5ce94d9d5d7) | Necessary | End of the session | This cookie is used to ensure that content membership logins cannot be forged. | | |
| 45 | | \_\_hs\_gpc\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#0676746f7067657f466e7364757669722865696b) | Necessary | 180 days | This cookie is used when the Global Privacy Control banner is dismissed. | | |
| 46 | | \_\_hs\_notify\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#79090b100f181a0039110c1b0a09160d571a1614) | Necessary | 180 days | This cookie is used when the website uses a Notify consent banner type. | | |
| 47 | | hs\_ab\_test | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#acdcdec5dacdcfd5ecc4d9cedfdcc3d882cfc3c1) | Necessary | End of the session | This cookie is used to consistently serve visitors the same version of an A/B test page they've seen before. | | |
| 48 | | \_key | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#1b6b69726d7a78625b736e79686b746f35787476) | Necessary | 14 days | When visiting a password-protected page, this cookie is set so future visits to the page from the same browser do not require login again. | | |
| 49 | | \_\_hsmem | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA[\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#f383819a8592908ab39b869180839c87dd909c9e) | Necessary | 7 days | This cookie is set when visitors log in to a HubSpot-hosted site. It contains encrypted data that identifies the membership user when they are currently logged in. | | |
| 50 | | hs-membership-csrf | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#5b2b29322d3a38221b332e39282b342f75383436) | Necessary | End of the session | This cookie is used to ensure that content membership logins cannot be forged. | | |
| 51 | 51 | | \_\_cfruid | |
| 52 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#bacac8d3ccdbd9c3fad2cfd8c9cad5ce94d9d5d7) | |
| 52 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#28585a415e494b5168405d4a5b58475c064b4745) | |
| 53 | 53 | |
| 54 | 54 | Cloudflare, Inc. 101 Townsend St. San Francisco, CA 94107 |
| 55 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#95f1e5fad5f6f9fae0f1f3f9f4e7f0bbf6faf8) | |
| 55 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#2d495d426d4e414258494b414c5f48034e4240) | |
| 56 | 56 | |
| 57 | 57 | | Necessay | End of the session | This cookie is set by HubSpot's CDN provider because of their rate limiting policies. Learn more about Cloudflare cookies. | |
| 58 | 58 | | \_\_cfuvid | |
| 59 | 59 | |
| 60 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#fa8a88938c9b9983ba928f98898a958ed4999597) | |
| 60 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#8bfbf9e2fdeae8f2cbe3fee9f8fbe4ffa5e8e4e6) | |
| 61 | 61 | |
| 62 | 62 | Cloudflare, Inc. 101 Townsend St. San Francisco, CA 94107 |
| 63 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#c7a3b7a887a4aba8b2a3a1aba6b5a2e9a4a8aa) | |
| 63 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#3e5a4e517e5d52514b5a58525f4c5b105d5153) | |
| 64 | 64 | |
| 65 | 65 | | Necessay | End of the session | This cookie is set by HubSpot's CDN provider because of their rate limiting policies. Learn more about Cloudflare cookies. | |
| 66 | 66 | | \_\_cf\_bm | |
| 67 | 67 | |
| 68 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#5f2f2d36293e3c261f372a3d2c2f302b713c3032) | |
| 68 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#85f5f7ecf3e4e6fcc5edf0e7f6f5eaf1abe6eae8) | |
| 69 | 69 | |
| 70 | 70 | Cloudflare, Inc. 101 Townsend St. San Francisco, CA 94107 |
| 71 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#2642564966454a495342404a4754430845494b) | |
| 71 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#6d091d022d0e010218090b010c1f08430e0200) | |
| 72 | 72 | |
| 73 | 73 | | Necessary | 30 minutes | This cookie is set by HubSpot's CDN provider and is a necessary cookie for bot protection. Learn more about Cloudflare cookies. | |
| 74 | | \_\_hstc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#bfcfcdd6c9dedcc6ffd7caddcccfd0cb91dcd0d2) | Performance and analytics | 6 months | The main cookie for tracking visitors. | | |
| 75 | | hubspotutk | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#cbbbb9a2bdaaa8b28ba3bea9b8bba4bfe5a8a4a6) | Performance and analytics | 6 months | This cookie keeps track of a visitor's identity. It is passed to HubSpot on form submission and used when deduplicating contacts. | | |
| 76 | | \_\_hssc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#8bfbf9e2fdeae8f2cbe3fee9f8fbe4ffa5e8e4e6) | Performance and analytics | 6 months | This cookie keeps track of sessions. | | |
| 77 | | \_\_hssrc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#95e5e7fce3f4f6ecd5fde0f7e6e5fae1bbf6faf8) | Performance and analytics | End of the session | Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser | | |
| 74 | | \_\_hstc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#2353514a5542405a634b564150534c570d404c4e) | Performance and analytics | 6 months | The main cookie for tracking visitors. | | |
| 75 | | hubspotutk | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#b9c9cbd0cfd8dac0f9d1ccdbcac9d6cd97dad6d4) | Performance and analytics | 6 months | This cookie keeps track of a visitor's identity. It is passed to HubSpot on form submission and used when deduplicating contacts. | | |
| 76 | | \_\_hssc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#4434362d3225273d042c312637342b306a272b29) | Performance and analytics | 6 months | This cookie keeps track of sessions. | | |
| 77 | | \_\_hssrc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#f080829986919389b098859283809f84de939f9d) | Performance and analytics | End of the session | Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser | |