Cookies Policy
NOTEDFIRST SEEN 2026-08-22 · VERSION 20260822_rev01 · COMPARED WITH 20260821_rev01
What changed, in plain language
Nothing changed in this update except scrambled email-protection links in the cookie table. The same cookies, the same providers, the same storage times, and the same purposes are all still listed. PLOS's site uses an anti-spam tool that hides contact email addresses behind encoded links, and those codes get re-scrambled every time the page is served — so the page looks different to an automated comparison even though no wording changed.
This change appears to be cosmetic (formatting, typos, or contact details).
Changelog
- ± CHANGEDHidden email link codes were re-scrambled
The HubSpot and Cloudflare contact links in the cookie table are protected by an anti-spam tool that encodes the email address into a random-looking code. Those codes were regenerated, so the link text changed. The actual email addresses, cookie names, providers, storage periods, and purposes are all identical to before.
HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#6f1f1d06190e0c162f071a0d1c1f001b410c0002)
HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#0f7f7d66796e6c764f677a6d7c7f607b216c6062)
Full text changes — 20260821_rev01 to 20260822_rev01
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 35 | 35 | | \_cer.v | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | Up to 31 Days | Tracks whether a visitor has visited the site before. | |
| 36 | 36 | | \_ce.s | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Year | Tracks a recording visitor session unique ID, host, and start time. | |
| 37 | 37 | | \_ce.cch | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Second | Used to check if cookies can be added. | |
| 38 | 38 | | \_ce.gtld | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Second | Used to identify the top-level domain. | |
| 39 | 39 | | ce\_need\_secure\_cookie | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 1 Second | Used to determine cookie security parameters. | |
| 40 | 40 | | ce\_successful\_csp\_check | Crazy Egg, 16220 Ridgeview Ln La Mirada, CA 90638, USA [Privacy Policy](https://www.crazyegg.com/privacy) | Performance and Analytics | 24 Hours | Determines if the page has a Content Security Policy rule that would prevent tracking. | |
| 41 | | \_\_hs\_opt\_out | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#6f1f1d06190e0c162f071a0d1c1f001b410c0002) | Necessary | 6 month | This cookie is used by the opt-in privacy policy to remember not to ask the visitor to accept cookies again. | | |
| 42 | | \_\_hs\_do\_not\_track | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#1565677c6374766c557d607766657a613b767a78) | Necessary | 6 month | This cookie can be set to prevent the tracking code from sending any information to HubSpot. | | |
| 43 | | \_\_hs\_initial\_opt\_in | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#2c5c5e455a4d4f556c44594e5f5c4358024f4341) | Necessary | 7 days | This cookie is used to prevent the banner from always displaying when visitors are browsing in strict mode. | | |
| 44 | | \_\_hs\_cookie\_cat\_pref | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#7c0c0e150a1d1f053c14091e0f0c1308521f1311) | Necessary | 6 months | This cookie is used to record the categories a visitor consented to. | | |
| 45 | | \_\_hs\_gpc\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#e797958e9186849ea78f928594978893c984888a) | Necessary | 180 days | This cookie is used when the Global Privacy Control banner is dismissed. | | |
| 46 | | \_\_hs\_notify\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#deaeacb7a8bfbda79eb6abbcadaeb1aaf0bdb1b3) | Necessary | 180 days | This cookie is used when the website uses a Notify consent banner type. | | |
| 47 | | hs\_ab\_test | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#1f6f6d76697e7c665f776a7d6c6f706b317c7072) | Necessary | End of the session | This cookie is used to consistently serve visitors the same version of an A/B test page they've seen before. | | |
| 48 | | \_key | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#b6c6c4dfc0d7d5cff6dec3d4c5c6d9c298d5d9db) | Necessary | 14 days | When visiting a password-protected page, this cookie is set so future visits to the page from the same browser do not require login again. | | |
| 49 | | \_\_hsmem | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA[\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#a6d6d4cfd0c7c5dfe6ced3c4d5d6c9d288c5c9cb) | Necessary | 7 days | This cookie is set when visitors log in to a HubSpot-hosted site. It contains encrypted data that identifies the membership user when they are currently logged in. | | |
| 50 | | hs-membership-csrf | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#6c1c1e051a0d0f152c04190e1f1c0318420f0301) | Necessary | End of the session | This cookie is used to ensure that content membership logins cannot be forged. | | |
| 41 | | \_\_hs\_opt\_out | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#0f7f7d66796e6c764f677a6d7c7f607b216c6062) | Necessary | 6 month | This cookie is used by the opt-in privacy policy to remember not to ask the visitor to accept cookies again. | | |
| 42 | | \_\_hs\_do\_not\_track | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#6c1c1e051a0d0f152c04190e1f1c0318420f0301) | Necessary | 6 month | This cookie can be set to prevent the tracking code from sending any information to HubSpot. | | |
| 43 | | \_\_hs\_initial\_opt\_in | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#c2b2b0abb4a3a1bb82aab7a0b1b2adb6eca1adaf) | Necessary | 7 days | This cookie is used to prevent the banner from always displaying when visitors are browsing in strict mode. | | |
| 44 | | \_\_hs\_cookie\_cat\_pref | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#6a1a18031c0b09132a021f08191a051e44090507) | Necessary | 6 months | This cookie is used to record the categories a visitor consented to. | | |
| 45 | | \_\_hs\_gpc\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#82f2f0ebf4e3e1fbc2eaf7e0f1f2edf6ace1edef) | Necessary | 180 days | This cookie is used when the Global Privacy Control banner is dismissed. | | |
| 46 | | \_\_hs\_notify\_banner\_dismiss | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#f9898b908f989a80b9918c9b8a89968dd79a9694) | Necessary | 180 days | This cookie is used when the website uses a Notify consent banner type. | | |
| 47 | | hs\_ab\_test | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#d9a9abb0afb8baa099b1acbbaaa9b6adf7bab6b4) | Necessary | End of the session | This cookie is used to consistently serve visitors the same version of an A/B test page they've seen before. | | |
| 48 | | \_key | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#3242405b4453514b725a475041425d461c515d5f) | Necessary | 14 days | When visiting a password-protected page, this cookie is set so future visits to the page from the same browser do not require login again. | | |
| 49 | | \_\_hsmem | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA[\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#1464667d6275776d547c617667647b603a777b79) | Necessary | 7 days | This cookie is set when visitors log in to a HubSpot-hosted site. It contains encrypted data that identifies the membership user when they are currently logged in. | | |
| 50 | | hs-membership-csrf | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#b8c8cad1ced9dbc1f8d0cddacbc8d7cc96dbd7d5) | Necessary | End of the session | This cookie is used to ensure that content membership logins cannot be forged. | | |
| 51 | 51 | | \_\_cfruid | |
| 52 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#ef9f9d86998e8c96af879a8d9c9f809bc18c8082) | |
| 52 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#9aeae8f3ecfbf9e3daf2eff8e9eaf5eeb4f9f5f7) | |
| 53 | 53 | |
| 54 | 54 | Cloudflare, Inc. 101 Townsend St. San Francisco, CA 94107 |
| 55 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#0b6f7b644b6867647e6f6d676a796e25686466) | |
| 55 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#c0a4b0af80a3acafb5a4a6aca1b2a5eea3afad) | |
| 56 | 56 | |
| 57 | 57 | | Necessay | End of the session | This cookie is set by HubSpot's CDN provider because of their rate limiting policies. Learn more about Cloudflare cookies. | |
| 58 | 58 | | \_\_cfuvid | |
| 59 | 59 | |
| 60 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#f080829986919389b098859283809f84de939f9d) | |
| 60 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#1e6e6c77687f7d675e766b7c6d6e716a307d7173) | |
| 61 | 61 | |
| 62 | 62 | Cloudflare, Inc. 101 Townsend St. San Francisco, CA 94107 |
| 63 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#a7c3d7c8e7c4cbc8d2c3c1cbc6d5c289c4c8ca) | |
| 63 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#1571657a5576797a607173797467703b767a78) | |
| 64 | 64 | |
| 65 | 65 | | Necessay | End of the session | This cookie is set by HubSpot's CDN provider because of their rate limiting policies. Learn more about Cloudflare cookies. | |
| 66 | 66 | | \_\_cf\_bm | |
| 67 | 67 | |
| 68 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#b7c7c5dec1d6d4cef7dfc2d5c4c7d8c399d4d8da) | |
| 68 | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#59292b302f383a2019312c3b2a29362d773a3634) | |
| 69 | 69 | |
| 70 | 70 | Cloudflare, Inc. 101 Townsend St. San Francisco, CA 94107 |
| 71 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#1571657a5576797a607173797467703b767a78) | |
| 71 | [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#b8dcc8d7f8dbd4d7cddcded4d9cadd96dbd7d5) | |
| 72 | 72 | |
| 73 | 73 | | Necessary | 30 minutes | This cookie is set by HubSpot's CDN provider and is a necessary cookie for bot protection. Learn more about Cloudflare cookies. | |
| 74 | | \_\_hstc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#3f4f4d56495e5c467f574a5d4c4f504b115c5052) | Performance and analytics | 6 months | The main cookie for tracking visitors. | | |
| 75 | | hubspotutk | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#c9b9bba0bfa8aab089a1bcabbab9a6bde7aaa6a4) | Performance and analytics | 6 months | This cookie keeps track of a visitor's identity. It is passed to HubSpot on form submission and used when deduplicating contacts. | | |
| 76 | | \_\_hssc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#5c2c2e352a3d3f251c34293e2f2c3328723f3331) | Performance and analytics | 6 months | This cookie keeps track of sessions. | | |
| 77 | | \_\_hssrc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#3343415a4552504a735b465140435c471d505c5e) | Performance and analytics | End of the session | Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser | | |
| 74 | | \_\_hstc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#dbaba9b2adbab8a29bb3aeb9a8abb4aff5b8b4b6) | Performance and analytics | 6 months | The main cookie for tracking visitors. | | |
| 75 | | hubspotutk | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#c0b0b2a9b6a1a3b980a8b5a2b3b0afb4eea3afad) | Performance and analytics | 6 months | This cookie keeps track of a visitor's identity. It is passed to HubSpot on form submission and used when deduplicating contacts. | | |
| 76 | | \_\_hssc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#29595b405f484a5069415c4b5a59465d074a4644) | Performance and analytics | 6 months | This cookie keeps track of sessions. | | |
| 77 | | \_\_hssrc | HubSpot, Inc. Two Canal Park, Cambridge, MA 02141 USA [\[email protected\]](https://plos.org/cdn-cgi/l/email-protection#8efefce7f8efedf7cee6fbecfdfee1faa0ede1e3) | Performance and analytics | End of the session | Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser | |