Browse all guides
| Name | Purpose | Lifetime |
|---|---|---|
| _lo_vid | Anonymous visitor ID, so visits link to one journey | 13 months |
| _lo_visit | Current visit ID | 1 day |
| _lo_seen | Time of last activity, to start a new visit after 30 minutes | 1 day |
| _lo_touch | First and last source, used to fill hidden fields | 13 months |
- Stored as first-party cookies and local storage on your own domain. No third-party cookies.
- IP addresses aren't stored; country comes from the network edge and only the country is kept.
- Password, card, bank and file fields are never read.
Cookie banners
HeyLead is marketing measurement, so in the EU/UK most sites only start it after the visitor agrees to analytics or marketing cookies. The easiest way is consent mode:
- 1Add
data-consent="required"to your HeyLead script tag. Nothing is stored or sent until the visitor accepts. - 2In your cookie banner's "accept" action, call
HeyLead.consent(). If the banner runs before our script loads, setwindow.heyLeadConsent = trueinstead. - 3If a visitor withdraws consent, call
HeyLead.consent(false). Tracking stops and HeyLead's cookies are removed.
Script tag with consent mode
<script async src="https://YOUR-TRACKER-ADDRESS/t.js" data-site="st_xxxxxxxxxx" data-consent="required"></script>Using Google Tag Manager or a consent tool (Cookiebot, CookieYes, OneTrust…) instead? Fire the HeyLead tag only after consent, or mark the script as Statistics or Marketing. In consent mode, browsers that send a Global Privacy Control signal aren't tracked unless the visitor accepts. Full details are in our Cookies and data collection policy. Ask your own legal adviser what's right for your site.
Did this guide answer your question?
Still need help?
A real person replies within one business day. Include your website address and what you've tried.