The _hjSession_<site-id> cookie
The Hotjar session cookie, which keeps requests in the same 30-minute window in one Hotjar session.
_hjSession_<site-id> at a glance
- Cookie name
_hjSession_<site-id>- Vendor
- Hotjar
- Category
- Analytics
- Party
- First-party
- Typical duration
- 30 minutes, extended while active
- Set on
.<your-domain>- Value format
- JSON (fields not documented by vendor)
- Name match
- Any cookie whose name starts with
_hjSession_
What the _hjSession_<site-id> cookie does
_hjSession_ holds the current Hotjar session data, with the site's Hotjar ID as the suffix. It makes sure later requests in the same session window are attributed to the same Hotjar session.
Hotjar documents a 30 minute lifetime that is extended while the visitor stays active, so it behaves like a sliding session.
What TagPipes observed
0.47%
of sites scanned set it (192 of 41,162)
under an hour
median observed lifetime
TagPipes scanned 41,162 public websites between August 11, 2026 and September 13, 2026, loading up to three pages per site in a real browser as a first-time visitor. _hjSession_<site-id> was present on 192 of them.
It was set as a first-party cookie on 176 sites and as a third-party cookie on 16. A site can count in both. Where it was stored as a persistent cookie, the median lifetime we recorded was under an hour.
Often found alongside
Percentage of sites with _hjSession_<site-id> where the other cookie was also present.
Technologies detected on the same sites
- Hotjar on 100% of them (0.49% of all sites scanned)
- Google Analytics on 97% of them (55% of all sites scanned)
- Google Fonts on 77% of them (78% of all sites scanned)
- Google Tag Manager on 73% of them (30% of all sites scanned)
- Meta Pixel on 66% of them (13% of all sites scanned)
Aggregate figures across all sites scanned. Websites of TagPipes customers are excluded, no individual site is named, and cookie values are never read or stored. Snapshot dated September 13, 2026.
How to check for _hjSession_<site-id> on a website
- Open the site in Chrome, then open DevTools (F12, or Cmd+Option+I on a Mac).
- Go to the Application tab and expand Cookies in the left panel.
- Select each domain listed there and look for a name starting with
_hjSession_. The Expires column shows when it will be deleted. - If it is not there, reload the page. Many cookies are only set after a tag has loaded, and some only after a visitor has made a consent choice.
Other Hotjar cookies
Sources
Purpose, duration and value format checked against the vendor documentation above on . The figures under What TagPipes observed are TagPipes scan data from September 13, 2026, not values documented by the vendor. Vendors change their cookies, and sites can configure their own names and lifetimes. Browse all cookies.
Know every cookie your own site sets
TagPipes Pulse identifies the cookies dropped on your site and flags unclassified or miscategorized ones. Shield builds your cookie declaration from a real scan rather than a questionnaire.
TagPipes monitors, configures and reports. It does not determine legal compliance and does not provide legal advice. Output is informational and reflects observed state at the time of observation. Rawsoft's expertise is technology, not law; please confirm any regulatory interpretation with your own counsel.