Figure Logo

Cookie Information

Last revised: May 28, 2024

Name Provider Purpose Expiration
__cf_bm Hubspot  Opens in a new window. Manages incoming traffic that matches criteria associated with bots. The cookie does not collect any personal data, and any information collected is subject to one-way encryption. 1 hour
__hssc Hubspot  Opens in a new window. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp. 1 hour
__hssrc Hubspot  Opens in a new window. Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session. 1 hour
__hstc Hubspot  Opens in a new window. This is the main cookie for tracking visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). 180 days
_cfuvid Hubspot  Opens in a new window. Hubspot uses Cloudflare WAF to distinguish individual users who share the same IP address and apply rate limits 1 hour
_dd_s Datadog  Opens in a new window. Used to troubleshoot and test website. 1 hour
_fbp Facebook  Opens in a new window. Facebook first-party pixel for retargeting site visitors elsewhere. 89 days
_ft Figure Used for internal tracking of users 364 days
_ft_prepop Figure Used for affiliate api data on registration 2 days
_ga Google  Opens in a new window. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. 729 days
_ga_xxxxxxxxxx Google  Opens in a new window. Google Analytics tag to determine that two distinct web visits belong to the same user across sessions. 729 days
_gcl_au Google  Opens in a new window. Google Analytics tag to determine that two distinct web visits belong to the same user across sessions. 89 days
_gclxxxx Google  Opens in a new window. Google conversion tracking cookie 89 days
_GRECAPTCHA Google  Opens in a new window. Used by Google reCaptcha for risk analysis 179 days
_uetsid Microsoft  Opens in a new window. This cookie is used by Bing to determine what ads should be shown that may be relevant to the end user perusing the site. 0 days
_uetvid Microsoft  Opens in a new window. This cookie is used by Bing to determine what ads should be shown that may be relevant to the end user perusing the site. 1 day
_upscope__region Upscope  Opens in a new window. This cookie is for upscope which lets our customer service team troubleshoot borrowers applicants remotely. 28 days
_upscope__shortId Upscope  Opens in a new window. This cookie is for upscope which lets our customer service team troubleshoot borrowers applicants remotely. 28 days
_upscope__waitingForCallAt Upscope  Opens in a new window. This cookie is for upscope which lets our customer service team troubleshoot borrowers applicants remotely. 11225 days
AnalyticsSyncHistory Upscope  Opens in a new window. This cookie is for upscope which lets our customer service team troubleshoot borrowers applicants remotely. 29 days
bcookie LinkedIn  Opens in a new window. Used by LinkedIn to store information about the time a sync with the lms_analytics cookie took place for users in the Designated Countries 30 days
bito Beeswax.io  Opens in a new window. This cookie is generally provided by bidr.io and is used for advertising purposes. 394 days
bitoIsSecure Beeswax.io  Opens in a new window. The Beeswax technology allows our customers to buy ad space on websites, mobile apps, video players, and other devices and allows for the use of proprietary and third party data in the purchase of that ad space. 394 days
c LinkedIn  Opens in a new window. Used by the social networking service, LinkedIn, for tracking the use of embedded services. 2 hours
checkForPermission Beeswax.io  Opens in a new window. This cookie is set by Beeswax to determine whether the user has accepted the cookie consent box. 0 days
dd_cookie_test Datadog  Opens in a new window. Temporary cookie used to test for Data Dog cookie support. Expires instantly. 0 days
fsession_c_figure Figure New session cookie 1 day
fgrspc Figure Auth0 login cookie 0 days
FPC Microsoft  Opens in a new window. Used to identify the visitor across visits and devices. This allows the website to present the visitor with relevant advertisement - The service is provided by third party advertisement hubs, which facilitate real-time bidding for advertisers. 6 days
fr Facebook  Opens in a new window. Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. 1 day
fs_lua Fullstory  Opens in a new window. Fullstory tag to track user behavior on figure.com 1 hour
fs_uid Fullstory  Opens in a new window. Used by FullStory to track the user across sessions and pages 364 days
guest_id X  Opens in a new window. This cookie is set by X (formerly Twitter) to identify and track the website visitor. 729 days
guest_id_ads X  Opens in a new window. This cookie is set by X (formerly Twitter) to identify and is for advertising when logged out 729 days
guest_id_marketing X  Opens in a new window. This cookie is set by X (formerly Twitter) to identify and is for advertising when logged out 729 days
hubspotutk Hubspot  Opens in a new window. This cookie is associated with websites built on the HubSpot platform and is used to keep track of a visitor's identity. This cookie is passed to HubSpot through HubSpot form submission and used when deduplicating contacts. 179 days
IDE Google  Opens in a new window. Used by Google's DoubleClick to serve targeted advertisements that are relevant to users across the web. Targeted advertisements may be displayed to users based on previous visits to a website. These cookies measure the conversion rate of ads presented to the user. 1 day
li_sugr LinkedIn  Opens in a new window. Used by LinkedIn to make a probabilistic match of a user's identity outside the Designated Countries 90 days
lidc LinkedIn  Opens in a new window. Used by LinkedIn for routing. 1 day
MR Microsoft  Opens in a new window. Used by Microsoft Clarity to indicate whether to refresh MUID. 1 hour
MSPTC Microsoft  Opens in a new window. This cookie allows Microsoft to serve relevant advertisements to visitors 365 days
muc_ads X  Opens in a new window. This is a cookie that is set by X.com (formerly Twitter). It is used for optimizing ad relevance by collecting visitor navigation data. 400 days
MUID Microsoft  Opens in a new window. Microsoft User Identifier tracking cookie used by Bing Ads. It can be set by embedded microsoft scripts. Widely believed to sync across many different Microsoft domains, allowing user tracking. 1 hour
ndp_session_id Nextdoor  Opens in a new window. Nextdoor tracking cookie for conversion and retargeting 28 days
OptanonAlertBoxClosed OneTrust  Opens in a new window. This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information. 364 days
OptanonConsent OneTrust  Opens in a new window. This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor. 364 days
optimizelyDomainTestCookie Optimizely  Opens in a new window. These Optimizely cookies allow us to test different versions of website pages to different users at the same time and to track how users navigate around our website. We use this information to test new features and make the website easier to use. 179 days
optimizelyEndUserId Optimizely  Opens in a new window. Cookie set by the Optimizely website optimization platform. This cookie is a unique user identifier. 180 days
optimizelyOptOut Optimizely  Opens in a new window. Stores cookie consent preferences 365 days
personalization_id X  Opens in a new window. This cookie carries out information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website. 400 days
sa-user-id StackAdapt  Opens in a new window. Stack Adapt advertising first-party cookie. Used by Stack Adapt to track visits across websites to deliver a series of advertisement products such as real time bidding from third party advertisers. 365 days
sa-user-id-v2 StackAdapt  Opens in a new window. Stack Adapt advertising first-party cookie. Used by Stack Adapt to track visits across websites to deliver a series of advertisement products such as real time bidding from third party advertisers. 365 days
sa-user-id-v3 StackAdapt  Opens in a new window. Stack Adapt advertising first-party cookie. Used by Stack Adapt to track visits across websites to deliver a series of advertisement products such as real time bidding from third party advertisers. 365 days
test_cookie Google  Opens in a new window. Used to check if the user's browser supports cookies 0 days
UserMatchHistory LinkedIn  Opens in a new window. Contains a unique identifier used by LinkedIn to determine that two distinct hits belong to the same user across browsing sessions. 1 day
bscookie LinkedIn  Opens in a new window. Used by the social networking service, LinkedIn, for tracking the use of embedded services. 364 days
Pixel for retargeting site visitors elsewhere. The pixel collects the Referrer URL, Session info, Partner ID, Cookies, IP, User agent, and Device ID. 30 Days