See which HitsBoost cookies protect forms, how analytics technologies measure visits, and how third-party services may use separate cookies.
The cookies on this site today
HitsBoost sets two form security cookies. ‘free_sample_csrf’ is created when you open a free sample page; ‘contact_csrf’ is created when you open the contact page. Each helps the server compare a form's submitted token with a value held by the same browser. They are essential to those forms, and each is set with a maximum age of 24 hours.
These cookies are marked HttpOnly and SameSite=Lax. They are marked Secure when the page is served over HTTPS. They do not contain your Facebook or Instagram password, payment card number, or the message you type into a form. Browsing ordinary informational pages does not require you to submit either form.
What happens when you block them
If your browser blocks or deletes a form security cookie before you submit the form, the server cannot verify the token and will reject that submission. Reloading the page can create a fresh token. Other pages and browser tools may still be usable without submitting the form.
You can inspect or remove site cookies in your browser's privacy settings. The exact steps differ by browser and device. Removing a cookie may also remove the form state tied to it; it does not by itself delete a contact message or sample request already saved in our database.
Browser tools and local data
The engagement and watch time calculators, caption generator, image resizer, and Facebook link checker run in your browser. They do not need HitsBoost analytics cookies to perform their calculations. The image resizer reads the file you choose locally and creates a download; it does not upload that image to HitsBoost.
Closing the announcement banner saves ‘hitsboost-announcement-dismissed’ in session storage. Choosing a language saves ‘hitsboost-explicit-locale’; dismissing a Brazil or UK suggestion saves ‘hitsboost-region-suggestion-dismissed:BR:v1’ or ‘hitsboost-region-suggestion-dismissed:GB:v1’ respectively. These preferences last for the browser tab session, are not cookies, and are not sent with ordinary page requests. The regional suggestion uses only an approximate country code supplied by our hosting provider through this site and does not ask for precise device location. The site may use normal caching for CSS, JavaScript, images and fonts. Your browser may retain history or downloads according to its settings.
External resources and checkout
HitsBoost currently requests font styles and files from Google Fonts and loads the support widget from help.hitsboost.com. Those requests reach separate services. The page remains readable if the font fails to load because it has fallback fonts; opening or sending a support chat may use storage controlled by the help service.
Clicking a paid package takes you to a third-party checkout site. That provider may set its own payment, security, or fraud-prevention cookies. Review the provider's cookie and privacy notices on its domain before completing a transaction. HitsBoost does not control cookies set only by another site.
Analytics and advertising
Optional analytics load only after you select ‘Allow analytics’. Google Analytics can then measure visits, traffic sources, device and browser information, and site interactions, and may set identifiers such as ‘_ga’. Ahrefs Web Analytics provides aggregated traffic reporting and describes its service as operating without cookies or persistent identifiers. These integrations help us understand which pages need improvement.
You can select ‘Decline analytics’ and still use the website and checkout links. The ‘Analytics choices’ button in the footer reopens the choice on any page. If you decline after allowing analytics, the site attempts to remove its own Google Analytics cookies and reloads without these scripts. You can also remove browser storage through your browser settings. The site does not currently run third-party display advertising.
Checking a cookie yourself
Most browsers show stored cookies in a privacy or developer-tools panel for the current site. Look for the domain, cookie name, expiry, and security attributes to identify whether a value came from hitsboost.com. A cookie associated with a payment provider or font host belongs to that separate domain rather than to this application.
If you compare the inventory with your browser, remember that a cookie appears only after the page or form that sets it has been opened. The contact cookie is created on the contact page; the free sample cookie is created on a free sample page. A visitor who reads only a guide may not see either one.
Questions and policy changes
For more detail about submitted URLs, contact messages, request records, and service providers, read the Privacy Policy. If a cookie appears in your browser that is not named here, note the exact cookie name and page where you saw it so we can check whether it came from HitsBoost, a hosting layer, or another domain.
For a cookie question, open 24/7 chat support from the contact page or use its form. We will revise this page when checkout or other integrations change the browser's behavior. The updated date at the top of the page shows when the published description was last revised.