Cookies Policy
NOTEDFIRST SEEN 2026-08-17 · VERSION 20260817_rev01 · COMPARED WITH 20260816_rev01
What changed, in plain language
Nothing about PLOS's cookie practices changed. The only difference is that the scrambled codes in the contact-email links were regenerated — a normal side effect of the site's email-address obfuscation, which produces new codes each time the page is served. The cookie names, providers, categories, storage periods, and purposes are all identical.
This change appears to be cosmetic (formatting, typos, or contact details).
Changelog
- ± CHANGEDContact email links reshuffled (no real change)
The HubSpot and Cloudflare contact links in the cookie table use a system that hides email addresses behind a scrambled code. Those codes were regenerated, so the link addresses look different, but they point to the same contacts. No cookie, provider, purpose, or storage period was added, removed, or changed.
https://plos.org/cdn-cgi/l/email-protection#31414358475052487159445342415e451f525e5c
https://plos.org/cdn-cgi/l/email-protection#e8989a819e898b91a8809d8a9b98879cc68b8785
Full text changes — 20260816_rev01 to 20260817_rev01
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 35 | 35 | | \_cer.v | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | Up to 31 Days | Tracks whether a visitor has visited the site before. | |
| 36 | 36 | | \_ce.s | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Year | Tracks a recording visitor session unique ID, host, and start time. | |
| 37 | 37 | | \_ce.cch | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Second | Used to check if cookies can be added. | |
| 38 | 38 | | \_ce.gtld | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Second | Used to identify the top-level domain. | |
| 39 | 39 | | ce\_need\_secure\_cookie | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Second | Used to determine cookie security parameters. | |
| 40 | 40 | | ce\_successful\_csp\_check | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 24 Hours | Determines if the page has a Content Security Policy rule that would prevent tracking. | |
| 41 | | \_\_hs\_opt\_out | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#31414358475052487159445342415e451f525e5c) | Necessary | 6 month | This cookie is used by the opt-in privacy policy to remember not to ask the visitor to accept cookies again. | | |
| 42 | | \_\_hs\_do\_not\_track | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#bcccced5cadddfc5fcd4c9decfccd3c892dfd3d1) | Necessary | 6 month | This cookie can be set to prevent the tracking code from sending any information to HubSpot. | | |
| 43 | | \_\_hs\_initial\_opt\_in | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#a8d8dac1dec9cbd1e8c0ddcadbd8c7dc86cbc7c5) | Necessary | 7 days | This cookie is used to prevent the banner from always displaying when visitors are browsing in strict mode. | | |
| 44 | | \_\_hs\_cookie\_cat\_pref | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#c9b9bba0bfa8aab089a1bcabbab9a6bde7aaa6a4) | Necessary | 6 months | This cookie is used to record the categories a visitor consented to. | | |
| 45 | | \_\_hs\_gpc\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#f484869d8295978db49c819687849b80da979b99) | Necessary | 180 days | This cookie is used when the Global Privacy Control banner is dismissed. | | |
| 46 | | \_\_hs\_notify\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#10606279667173695078657263607f643e737f7d) | Necessary | 180 days | This cookie is used when the website uses a Notify consent banner type. | | |
| 47 | | hs\_ab\_test | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#cbbbb9a2bdaaa8b28ba3bea9b8bba4bfe5a8a4a6) | Necessary | End of the session | This cookie is used to consistently serve visitors the same version of an A/B test page they've seen before. | | |
| 48 | | \_key | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#bacac8d3ccdbd9c3fad2cfd8c9cad5ce94d9d5d7) | Necessary | 14 days | When visiting a password-protected page, this cookie is set so future visits to the page from the same browser do not require login again. | | |
| 49 | | \_\_hsmem | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA[\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#4d3d3f243b2c2e340d25382f3e3d2239632e2220) | Necessary | 7 days | This cookie is set when visitors log in to a HubSpot-hosted site. It contains encrypted data that identifies the membership user when they are currently logged in. | | |
| 50 | | hs-membership-csrf | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#08787a617e696b7148607d6a7b78677c266b6765) | Necessary | End of the session | This cookie is used to ensure that content membership logins cannot be forged. | | |
| 41 | | \_\_hs\_opt\_out | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#e8989a819e898b91a8809d8a9b98879cc68b8785) | Necessary | 6 month | This cookie is used by the opt-in privacy policy to remember not to ask the visitor to accept cookies again. | | |
| 42 | | \_\_hs\_do\_not\_track | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#61111308170002182109140312110e154f020e0c) | Necessary | 6 month | This cookie can be set to prevent the tracking code from sending any information to HubSpot. | | |
| 43 | | \_\_hs\_initial\_opt\_in | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#0f7f7d66796e6c764f677a6d7c7f607b216c6062) | Necessary | 7 days | This cookie is used to prevent the banner from always displaying when visitors are browsing in strict mode. | | |
| 44 | | \_\_hs\_cookie\_cat\_pref | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#ccbcbea5baadafb58ca4b9aebfbca3b8e2afa3a1) | Necessary | 6 months | This cookie is used to record the categories a visitor consented to. | | |
| 45 | | \_\_hs\_gpc\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#c5b5b7acb3a4a6bc85adb0a7b6b5aab1eba6aaa8) | Necessary | 180 days | This cookie is used when the Global Privacy Control banner is dismissed. | | |
| 46 | | \_\_hs\_notify\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#49393b203f282a3009213c2b3a39263d672a2624) | Necessary | 180 days | This cookie is used when the website uses a Notify consent banner type. | | |
| 47 | | hs\_ab\_test | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#d4a4a6bda2b5b7ad94bca1b6a7a4bba0fab7bbb9) | Necessary | End of the session | This cookie is used to consistently serve visitors the same version of an A/B test page they've seen before. | | |
| 48 | | \_key | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#7a0a08130c1b19033a120f18090a150e54191517) | Necessary | 14 days | When visiting a password-protected page, this cookie is set so future visits to the page from the same browser do not require login again. | | |
| 49 | | \_\_hsmem | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA[\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#eb9b99829d8a8892ab839e89989b849fc5888486) | Necessary | 7 days | This cookie is set when visitors log in to a HubSpot-hosted site. It contains encrypted data that identifies the membership user when they are currently logged in. | | |
| 50 | | hs-membership-csrf | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#b0c0c2d9c6d1d3c9f0d8c5d2c3c0dfc49ed3dfdd) | Necessary | End of the session | This cookie is used to ensure that content membership logins cannot be forged. | | |
| 51 | 51 | | \_\_cfruid | |
| 52 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#2555574c5344465c654d504756554a510b464a48) | |
| 52 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#78080a110e191b0138100d1a0b08170c561b1715) | |
| 53 | 53 | |
| 54 | 54 | Cloudflare, Inc. 101 Townsend St. San Francisco, CA 94107 |
| 55 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#6a0e1a052a0906051f0e0c060b180f44090507) | |
| 55 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#a9cdd9c6e9cac5c6dccdcfc5c8dbcc87cac6c4) | |
| 56 | 56 | |
| 57 | 57 | | Necessay | End of the session | This cookie is set by HubSpot's CDN provider because of their rate limiting policies. Learn more about Cloudflare cookies. | |
| 58 | 58 | | \_\_cfuvid | |
| 59 | 59 | |
| 60 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#82f2f0ebf4e3e1fbc2eaf7e0f1f2edf6ace1edef) | |
| 60 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#6f1f1d06190e0c162f071a0d1c1f001b410c0002) | |
| 61 | 61 | |
| 62 | 62 | Cloudflare, Inc. 101 Townsend St. San Francisco, CA 94107 |
| 63 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#c4a0b4ab84a7a8abb1a0a2a8a5b6a1eaa7aba9) | |
| 63 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#0c687c634c6f606379686a606d7e69226f6361) | |
| 64 | 64 | |
| 65 | 65 | | Necessay | End of the session | This cookie is set by HubSpot's CDN provider because of their rate limiting policies. Learn more about Cloudflare cookies. | |
| 66 | 66 | | \_\_cf\_bm | |
| 67 | 67 | |
| 68 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#1767657e6176746e577f6275646778633974787a) | |
| 68 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#2e5e5c47584f4d576e465b4c5d5e415a004d4143) | |
| 69 | 69 | |
| 70 | 70 | Cloudflare, Inc. 101 Townsend St. San Francisco, CA 94107 |
| 71 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#e084908fa0838c8f9584868c819285ce838f8d) | |
| 71 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#a3c7d3cce3c0cfccd6c7c5cfc2d1c68dc0ccce) | |
| 72 | 72 | |
| 73 | 73 | | Necessary | 30 minutes | This cookie is set by HubSpot's CDN provider and is a necessary cookie for bot protection. Learn more about Cloudflare cookies. | |
| 74 | | \_\_hstc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#4535372c3324263c052d302736352a316b262a28) | Performance and analytics | 6 months | The main cookie for tracking visitors. | | |
| 75 | | hubspotutk | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#9fefedf6e9fefce6dff7eafdeceff0ebb1fcf0f2) | Performance and analytics | 6 months | This cookie keeps track of a visitor's identity. It is passed to HubSpot on form submission and used when deduplicating contacts. | | |
| 76 | | \_\_hssc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#bfcfcdd6c9dedcc6ffd7caddcccfd0cb91dcd0d2) | Performance and analytics | 6 months | This cookie keeps track of sessions. | | |
| 77 | | \_\_hssrc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#1262607b6473716b527a677061627d663c717d7f) | Performance and analytics | End of the session | Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser | | |
| 74 | | \_\_hstc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#2d5d5f445b4c4e546d45584f5e5d4259034e4240) | Performance and analytics | 6 months | The main cookie for tracking visitors. | | |
| 75 | | hubspotutk | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#89f9fbe0ffe8eaf0c9e1fcebfaf9e6fda7eae6e4) | Performance and analytics | 6 months | This cookie keeps track of a visitor's identity. It is passed to HubSpot on form submission and used when deduplicating contacts. | | |
| 76 | | \_\_hssc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#40303229362123390028352233302f346e232f2d) | Performance and analytics | 6 months | This cookie keeps track of sessions. | | |
| 77 | | \_\_hssrc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#85f5f7ecf3e4e6fcc5edf0e7f6f5eaf1abe6eae8) | Performance and analytics | End of the session | Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser | |