Cookie Policy
Last updated: 29 March 2026
Cookies on sourcetag.io
Our website uses essential cookies for authentication (if you're logged in) and analytics. We do not use advertising cookies on our own site.
Cookies set by the SourceTag tracking script
When you install SourceTag on your website, our script sets the following first-party cookie on your visitors' devices:
| Cookie name | Purpose | Duration | Type |
|---|---|---|---|
_sourcetag (configurable) | Stores attribution data: UTM parameters, channel, referrer, landing page, visit count, first-touch and last-touch data | 365 days (configurable) | First-party, functional |
The cookie name and duration are configurable in your SourceTag dashboard. The default name is _sourcetag and the default duration is 365 days.
What data is stored in the cookie
The cookie contains a JSON object with:
- First-touch attribution data (channel, UTMs, click IDs, referrer, landing page)
- Last-touch attribution data (same fields, updated on each new visit)
- Visit count
- First visit timestamp
- Last seen timestamp
The cookie does not contain the visitor's name, email, IP address, or any other personally identifying information unless UTM parameters happen to contain such data (which would be unusual).
Cookie consent
If your website serves visitors in the EU or UK, you are required to obtain cookie consent before the SourceTag cookie is set. This is your responsibility as the website operator (data controller). We recommend using a cookie consent management platform such as CookieYes, Iubenda, or Cookiebot.
How to block the cookie
Visitors can block the cookie by:
- Declining cookie consent (if you implement a consent banner)
- Disabling cookies in their browser settings
- Using a browser extension that blocks first-party cookies
Server-side cookies (WordPress plugin)
If you enable server-side cookies in the SourceTag WordPress plugin, the same cookie data is set via an HTTP Set-Cookie header instead of JavaScript. This extends the cookie duration to 400 days in Safari. The cookie data and purpose are identical.