We use cookies to help our site run effectively and provide the best experience for our visitors. Use this guide to learn more about the cookies placed by Squarespace on our site, and third-party services and how to disable them. 

What are cookies?

Cookies are small pieces of data that websites store on a device. Cookies can improve your visitors’ browsing experience because they help websites remember preferences and understand how people use different features. Squarespace places two kinds of cookies on visitors’ browsers:

  • Necessary cookies so visitors can navigate and use key features on your site. 

  • Non-essential, or analytics and performance cookies, that collect information on your behalf about how visitors interact with your site.

Necessary and required cookies

Squarespace uses some necessary cookies that vary from site to site depending on the features it uses. For example, necessary and required cookies help these features work:

Name

Purpose, type, and duration

_acloggedin

  • Supports login by Acuity Scheduling client if the client has an account

  • Cookie

  • January 1, 2025

ACUITY_CART

  • Stores details about a client's package, gift, or subscription purchase, including the item purchased and the quantity

  • Only applies to the new scheduler

  • localStorage

  • No expiration

_client_acloggedin

  • Supports login by Acuity Scheduling client if the client has an account

  • Cookie

  • January 1, 2025

_dd_cookie_test

  • Tests if cookies are supported

  • Cookie

  • Expires instantly

_dd_s

  • Tracks browser errors

  • Cookie

  • Four hours

_dd_site_test

  • Tests if cookies are supported

  • Cookie

  • Expires instantly

_grecaptcha

  • Helps reduce spam in Acuity Scheduling

  • localStorage

  • No expiry

_ssid

  • Remembers devices for anti-fraud purposes

  • Cookie

  • Four years

CART

  • Shows when a visitor adds a product to their cart

  • Cookie

  • Two weeks

CHECKOUT_WEBSITE

client_username

  • Remembers a logged in Acuity Scheduling client's username between visits

  • Cookie

  • One year

clientUser

  • Stores the Acuity Scheduling client's username, OAuth2 Access Token, and OAuth2 Refresh Token. This cookie is required for functionality of logged-in clients

  • Cookie

  • 30 days

Commerce-checkout-state

  • Stores state of checkout while the visitor is completing their order in PayPal

  • sessionstorage

  • Session

Crumb

hasCart

  • Tells Squarespace that the visitor has a cart

  • Cookie

  • Two weeks

Locked

  • Prevents the password-protected screen from displaying if a visitor enters the correct site-wide password.

  • Cookie

  • Session

orderStatusSessionToken

  • Authenticates a visitor who logs into an order status page.

  • Cookie

  • One year

PHPSESSID

  • Securely authenticates a visitor during their checkout in Acuity Scheduling

  • Cookie

  • One month

RecentRedirect

  • Prevents redirect loops if a site has custom URL redirects. Redirect loops are bad for SEO.

  • Cookie

  • 30 minutes

remember_client

  • Remembers Acuity Scheduling client’s login details if they have an account

  • Cookie

  • 365 days

siteUserCrumb

SiteUserInfo

SiteUserSecureAuthToken

  • Authenticates a visitor who logs into a customer account

  • Cookie

  • Three years

squarespace-announcement-bar

  • Prevents the announcement bar from displaying if a visitor dismisses it

  • localStorage

  • Persistent

squarespace-likes

  • Shows when you've already "liked" a blog post

  • localStorage

  • Persistent

squarespace-popup-overlay

  • Prevents the promotional pop-up from displaying if a visitor dismisses it

  • localStorage

  • Persistent

squarespace-video-player-options

ss_cookieAllowed

  • Remembers if a visitor agreed to placing analytics cookies on their browser if a site is restricting the placement of cookies

  • Cookie

  • 30 days

ss_sd

Test

  • Investigates if the browser supports cookies and prevents errors

  • Cookie

  • Session

TZ

  • Enables a Acuity Scheduling client’s appointments to display correctly based on their time zone preferences.

  • localStorage

  • Persistent

Cross-site request forgery (CSRF)

CSRF is an attack vector that tricks a browser into taking unwanted action in an application when someone’s logged in.

Analytics and performance cookies

We use analytics and performance cookies to collect information on your behalf about how visitors interact with your site. Storing these cookies is how we populate the data you find in Squarespace analytics, such as traffic sources, unique visitors, and cart abandonment.

You can disable Squarespace analytics and performance cookies at any time.

Cookie Name

Duration

Purpose

ss_cid

Two years

Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cpvisit

Two years

Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvisit

30 minutes

Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvr

Two years

Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvt

30 minutes

Identifies unique visitors and tracks a visitor’s sessions on a site

Cookies placed by third-party services

As part of your Squarespace subscription, you can choose from several third-party integrations to enhance your site. Depending on the service provider, some of them may place third-party cookies on visitors’ browsers.

Adding a cookie banner disables or restricts cookies placed by some third-party services connected to your site, but not all. For example, if you add specific tracking to an audio block on your site, the cookie banner won’t block that content, which means it could place analytics cookies.

Note

If you use third-party cookies, or similar tracking technologies, we recommend talking to a professional or using a specialist third-party cookie consent management tool to meet your individual requirements.

Our cookie banner interacts with content from third-party integrations in different ways. The providers and content of the integrations typically fall into one of the following categories:

Consent Mode

Some providers, such as YouTube and Google, offer "Consent Mode" services so your visitors can provide their consent choices.

How you enable Consent Mode depends on the service you’re using, and how you’ve added the service to your site:

Content that we don’t block

For some third-party integrations, we don’t block or restrict ‌content, but ‌providers can offer their own cookie consent process. OpenTable and Tock are examples of providers that offer cookie consent processes. 

Providers that place necessary cookies

The following integrations place necessary cookies on visitors' browsers: Weglot, and Acuity. The cookie banner will not restrict necessary cookies. 

Disable non-essential cookies

To prevent Squarespace, and some third-party integrations from placing non-essential cookies on visitors’ browsers, you can disable non-essential cookies at any time:

  1. Open the Cookies & visitor data panel.

  2. Switch the toggle off beside Cookie Banner.

  3. Under Advanced Privacy settings, next to Non-essential Cookies, select Restrict from the dropdown menu.

  4. Click Save.

Note

Disabling non-essential cookies doesn’t disable all cookies placed by third-party services connected to your site.

You can also disable collecting these cookies from visitors until they accept your cookie policy in a cookie banner.

How disabling cookies changes what appears in analytics

After you disable analytics cookies, some data in Squarespace analytics won’t be a complete or accurate representation of visitor behavior.

Each pageview counts as its own visit, when in reality, one visitor might view multiple pages. So, it might look like you have more visitors than you actually have in panels like:

  • Traffic

  • Sales

Another effect of disabling cookies is that clicks, order conversion rates, and referrer attributions in panels like Traffic sources and Form & button conversions won’t be accurate. This is because disabling cookies prevents analytics from connecting consecutive visitor events in the same session.

Additionally, if someone visited your site before you disabled cookies and returns when cookies are disabled, that person counts as a new visitor, because we’ll ignore those cookies and try to remove them to follow your decision.

If you'd rather track all visitors accurately, and immediately place analytics cookies without your visitors' consent:

  1. Open the Cookies and data privacy panel.

  2. Switch the toggles off beside Manage Cookies button and Decline All button.

  3. Under Advanced Privacy settings, click Remove Restriction.

Note

We recommend keeping non-essential cookies restricted because some regions require you to get consent before non-essential cookies are placed. 

Check your cookies

For the most common browsers, you can:

  • Review which cookies are active in your browser’s settings.

  • Clear cookies from your browser or device, either globally or from a specific website.

For help locating cookies on your device, visit your browser's documentation: