Cookies and Why We Use Them

Cookies are identifiers that are transmitted to your device through your web browser when you visit a website. We use cookies to enable core features on our website, offer you a more personalized browsing experience, and obtain insights into how users interact with our websites and online content. To do so, we use data that your browser sends us, such as your IP address, browser type, location, language, access time and referring website addresses. The data gathered by the cookies we use do not directly identify you as a named individual. Personal data transmitted through cookies are processed in accordance with CGI’s Privacy Policy.

Cookies Set by Third Parties

Some of the cookies we use are first-party cookies, meaning that they are transmitted to your device from a domain or server managed by CGI, while others are third-party cookies, meaning that they are set on your device through our websites by entities other than CGI.

Third-party cookies collect information about your use of our websites to:

  • Verify your log-in status on such third-party platforms
  • Enable integration and content sharing capabilities
  • And provide us with analytics and marketing intelligence

Data collected through third-party cookies may be aggregated and used by third-party cookie providers for their own purposes, for example, to improve their products and services or deliver targeted advertising to you. To learn more about how third parties collect and use your data, please read their privacy policies using the following links: LinkedIn, YouTube, Twitter, Facebook, DoubleClick, Mouseflow, Hubspot, and Google.

The Categories of Cookies We Use

We use different types of cookies as described below. The applicable cookies under each category often change and a list of current cookies in use are available in our cookie management center.

Strictly necessary cookies

These cookies are strictly necessary to deliver the services you have specifically requested and enable the core features of our websites, including security and sessions management. The cookies are set by default and do not require your consent.

Name Purpose Retention period
JSESSIONID General purpose platform session cookie, used by sites written in JSP. Usually used to maintain an anonymous user session by the server. Session
__cfruid This cookie is set by HubSpot’s CDN provider because of their rate limiting policies. Session
hs-membership-csrf This cookie is used to ensure that content membership logins cannot be forged. It contains a random string of letters and numbers used to verify that a membership login is authentic. Session
__cf_bm This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website. 30 Minutes
cookie-agreed Stores the user's cookie consent state for the current domain 23 Days
AKA_A2 This cookie is generally provided by Akamai and is used for the Advanced Acceleration feature, which enables DNS Prefetch and HTTP2 Push. 1 Hour
Functional cookies

These cookies allow us to enhance your browsing experience, provide personalized features and remember your choices on our websites (including log-in information, accessibility configurations and language preferences). We do not use these cookies to track or profile you.

Name Purpose Retention period
hs-messages-is-open This cookie is used to determine and save whether the chat widget is open for future visits. It is set in your visitor's browser when they start a new chat, and resets to re-close the widget after 30 minutes of inactivity. If your visitor manually closes the chat widget, it will prevent the widget from re-opening on subsequent page loads in that browser session for 30 minutes. It contains a boolean value of True if present. 30 Mins
__hsmem This cookie is set when visitors log in to a HubSpot-hosted site. It contains encrypted data that identifies the membership user when they are currently logged in. 7 Days
starlight This cookie used for the disclaimer acceptance flag. 365 Days
player This cookie saves your settings before you play an embedded Vimeo video. This means that the next time you watch a Vimeo video, you will get your preferred settings back. 365 Days
hs_ab_test This cookie is used to consistently serve visitors the same version of an A/B test page they’ve seen before. It contains the id of the A/B test page and the id of the variation that was chosen for the visitor. Session
_cfuvid This cookie is a part of the services provided by Cloudflare - Including load-balancing, deliverance of website content and serving DNS connection for website operators Session
lang This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. Session
WFESessionId This cookie is necessary to enable a Power BI session, a Microsoft tool that helps visualize data. Session
YSC YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites. Session
<id>_key When visiting a password-protected page, this cookie is set so future visits to the page from the same browser do not require login again. The cookie name is unique for each password-protected page. It contains an encrypted version of the password so future visits to the page will not require the password again. 14 Days
s_cc Used to determine if cookies are enabled for Adobe Analytics Session
__hs_opt_out This cookie is used by the opt-in privacy policy to remember not to ask the visitor to accept cookies again. This cookie is set when you give visitors the choice to opt out of cookies. It contains the string "yes" or "no". 6 Months
__hs_do_not_track This cookie can be set to prevent the tracking code from sending any information to HubSpot. It contains the string "yes". 6 Months
_GRECAPTCHA This cookie is set by Google reCAPTCHA, which protects our site against spam enquiries on contact forms. 6 Months
hs_langswitcher_choice This cookie is used to save a visitor’s selected language choice when viewing pages in multiple languages. It is set when a visitor selects a language from the language switcher and is used as a language preference to redirect them to sites in their chosen language in the future if they are available. It contains a colon delimited string with the ISO639 language code choice on the left and the top level private domain it applies to on the right. An example will be "EN-US:hubspot.com". 2 Years
cookieValue This cookie used for the disclaimer acceptance flag. 1 Day
__hs_cookie_cat_pref This cookie is used to record the categories a visitor consented to. It contains data on the consented categories. 6 Months
ARRAffinitySameSite ARRAffinitySameSite is for Azure Web Sites for load balancing our application. This cookie is used to distribute traffic to the website on several servers in order to optimize response times. Session
__hs_initial_opt_in This cookie is used to prevent the banner from always displaying when visitors are browsing in strict mode. It contains the string "yes" or "no". 7 Days
language This cookie remembers your preferred language based on your previous selections, allowing the website to present content in your chosen language without you having to manually select it each time you visit. 365 Days
VISITOR_INFO1_LIVE This cookie is used as a unique identifier to track viewing of videos 365 Days
cookie-agreed-categories Save the user's cookie consent category states for the current domain 23 Days
hs-messages-hide-welcome-message This cookie is used to prevent the chat widget welcome message from appearing again for one day after it is dismissed. It contains a boolean value of True or False. 1 Day
Statistics cookies

Also known as “performance cookies” on our websites, these cookies are used to gather statistical information (such as pages visited and links clicked on) which we use to improve how our websites function. Reports generated from these cookies help us, for instance, to make the most popular pages or requested features easier to find. Information collected through statistics cookies is anonymous and does not identify you as a named individual.

Name Purpose Retention period
VID A visitor-related identifier for a LinkedIn microsite used to determine conversions for lead gen purposes. 1 Year
_ga This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners. 365 Days
__utmb This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. This cookie determines new sessions and visits and expires after 30 minutes. The cookie is updated every time data is sent to Google Analytics. Any activity by a user within the 30 minute life span will count as a single visit, even if the user leaves and then returns to the site. A return after 30 minutes will count as a new visit, but a returning visitor. 365 Days
s_ppv Used by Adobe Analytics to retain and fetch what percentage of a page was viewed Session
__hssc This cookie keeps track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp. 30 Minutes
gpy_pn Used to store and retrieve the previous page in Adobe Analytics. 6 Months
__utmc This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. It is not used in most sites but is set to enable interoperability with the older version of Google Analytics code known as Urchin. In this older versions this was used in combination with the __utmb cookie to identify new sessions/visits for returning visitors. When used by Google Analytics this is always a Session cookie which is destroyed when the user closes their browser. Where it is seen as a Persistent cookie it is therefore likely to be a different technology setting the cookie. 365 Days
s_tslv Used to retain and fetch time since the last visit in Adobe Analytics 6 Months
_ga_LC0YVRL587 This is a pattern-type cookie set by Google Analytics, where the name element contains the unique identifier of the account or website to which it is associated. Used to store and count pageviews. 1 Year
_gat This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes. 365 Days
fr Contains browser and user unique ID combination, used for targeted advertising. 365 Days
mf_[website-id] 1st party cookie, session lifetime: A cookie for identifying the current session on a website Session
s_pltp Provides page name value (URL) for use by Adobe Analytics Session
s_tp Tracks percent of page viewed 2 Years
mf_user This cookie establishes whether the user is a returning or first-time visitor. This is done simply by a yes/no toggle and no further information about the user is stored. This cookie has a lifetime of 90 days. 3 Months
__utmz This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour measure of site performance. This cookie identifies the source of traffic to the site - so Google Analytics can tell site owners where visitors came from when arriving on the site. The cookie has a life span of 6 months and is updated every time data is sent to Google Analytics. 365 Days
s_plt Tracks the time that the previous page took to load Session
vuid This domain is owned by Vimeo. The main business activities are: Video Hosting / Sharing 365 Days
_gid This domain is owned by LinkedIn. It uses GA Analytics to register a unique identifier that is used to generate statistics on how a visitor uses a website. 1 Day
_hjid This is a pattern-type cookie set by Google Analytics, where the name element contains the unique identifier of the account or website to which it is associated. It is a variation of the _gat cookie that is used to limit the amount of data that Google stores on high-traffic websites. 365 Days
gpv_pn This cookie gathers data for analyzing the visitor's use of the website including activity tracking, page visits and links clicked 2 Hours
_gat_UA-114077998-1 This is a pattern-type cookie set by Google Analytics, where the name element contains the unique identifier of the account or website to which it is associated. It is a variation of the _gat cookie that is used to limit the amount of data that Google stores on high-traffic websites. 365 Days
RT It measures page load time, or other timers associated with the page. 365 Days
_ga A cookie for identifying the current session on a website Session
AnalyticsSyncHistory Used to store information about the time a sync with the lms_analytics cookie took place for users in the Designated Countries 30 Days
ai_session This cookie name is associated with the Microsoft Application Insights software, which collects statistical usage and telemetry information for apps built on the Azure cloud platform. This is a unique anonymous session identifier cookie. The main purpose of this cookie is: Performance Session
__utma This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behaviour and measure site performance. This cookie lasts for 2 years by default and distinguishes between users and sessions. It it used to calculate new and returning visitor statistics. The cookie is updated every time data is sent to Google Analytics. The lifespan of the cookie can be customised by website owners. 365 Days
__hstc The main cookie for tracking visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). 6 Months
ai_user This cookie name is associated with the Microsoft Application Insights software, which collects statistical usage and telemetry information for apps built on the Azure cloud platform. This is a unique user identifier cookie enabling counting of the number of users accessing the application over time. The main purpose of this cookie is: Performance 1 Year
_gclxxxx Google conversion tracking cookie 365 Days
aam_uuid Set for ID sync for Adobe Audience Manager 30 Days
_gid This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited. 365 Days
lms_analytics Used to identify LinkedIn Members in the Designated Countries for analytics 30 Days
__utmt This cookie is set by Google Analytics. According to their documentation it is used to throttle the request rate for the service - limiting the collection of data on high traffic sites. It expires after 10 minutes 365 Days
__hssrc Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session. It contains the value "1" when present. Session
hubspotutk This cookie enables us to deliver the service and or response that individuals needs and expects from us, in a seamless manner 6 Months
mf_user 1st party cookie, persistent: A cookie for checking if the user is new or returning 90 Days
s_ips Tracks percent of page viewed 2 Years
__hjSessionUser_204526 Hotjar cookie that is set when a user first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID. Session
_gat_UA-nnnnnnn-nn This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites. 365 Days
_gat_UA-399437-1 This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites. 365 Days
Marketing cookies

These cookies are from third-party vendors placed with CGI’s consent. They collect browser and user information to (a) deliver relevant content, (b) limit users’ exposure to certain advertisements and (c) determine whether a user is logged into a social media platform where the user desires to share our content. The information collected through these cookies may be used to distinguish you from other visitors to our websites, but the information is not used to identify you as a named individual.

Name Purpose Retention period
sp_t The sp_landing is set by Spotify to implement audio content from Spotify on the website and also registers information on user interaction related to the audio content. 364 Days
bcookie This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. 365 Days
dpm The cookie is used for targeted advertising and marketing. Domain is owned by Adobe Audience Manager. 365 Days
NID This is a Google cookie that allows a company, such as CGI, to target advertising to users who have signed out of their service. A cookie allows CGI to show you useful content on Google services. By accepting marketing cookies, you authorize Google to process your information. You can also influence your own information or withdraw your consent in the Google services settings or by modifying your cookie settings from this cookie manager (link at the bottom of the page). Learn more: https://policies.google.com/technologies/cookies 365 Days
lissc This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. 365 Days
UserMatchHistory This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. 365 Days
_gcl_au Google Adsense to store and track conversions. 89 Days
c This domain is owned by IPONWEB and is used to provide a real time bidding platform for online advertising. 184 Days
_gcl_au Used through Google Analytics to understand user interaction with the site and advertising 3 Months
_fbp Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers 365 Days
lidc This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. 365 Days
ln_or Used to determine if Oribi analytics can be carried out on a specific domain 1 Day
anj We use this cookie to target advertising that is appropriate for you online. The domain is owned by AppNexus Inc., which provides a variety of online advertising services. A cookie allows a service provider to associate information about its partners with a cookie. Information that the cookie collects: IP address, browser and device information, ISP, analytical information about the visitor's movement on the site, and demographic information. You can influence the processing of your data and withdraw your consent by editing your settings from this cookie manager (link at the bottom of the page) or from the service provider's website. More information: https://www.xandr.com/privacy/platform-privacy-policy/ 365 Days
uuid MediaMath uses cookies to help recognize a computer or device so that they can deliver relevant advertising to you, measure the impact of that advertising and better understand and recognize digital media usage patterns. 13 Months
_cc_aud We use this cookie to target advertising that is appropriate for you through the Adform service. This domain is owned by Lotame. The cookie can be used to collect the following information: Cookie ID, Mobile Advertising ID, Partner ID, browser and device information, IP address and analytics information about the functionality of advertising. By accepting cookies, you allow Adform and Lotame to process your cookie information. You can influence the processing of your information by contacting dpo@adform.com or modifying your cookie settings. 365 Days
AMCVS_* Indicates the start of a session for Adobe Experience Cloud Session
c_user Session cookies are c_user and xs. c_user stores the username and the xs session secret, these two cookies together determine whether the user is logged in or not. 3 Months
bscookie This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. 365 Days
_fbp Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers 3 Months
lms_ads Used to identify LinkedIn Members off LinkedIn in the Designated Countries for advertising 30 Days
AMCV_* Unique Identifier for Adobe Experience Cloud 180 Days
datr The purpose of the Datr cookie is to identify the web browser used to connect to Facebook, regardless of the logged in user. This cookie plays a key role in Facebook's security and site integrity functions. 2 Years
sb Save browser data. 2 Years
RUL Save browser information. 1 Year
personalization_id This cookie is set due to Twitter integration and sharing capabilities for the social media. 2 Years
GPS YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites. 365 Days
liap Used by non-www.domains to denote the logged in status of a member 1 Year
demdex This cookie helps Adobe Audience Manger perform basic functions such as visitor identification, ID synchronization, segmentation, modeling and reporting 365 Days
A3 This domain is owned by Yahoo, whose principal business is Search and Advertising Services. 365 Days
_gcl_aw to provide ad delivery or retargeting. 90 Days
sp_landing The sp_landing is set by Spotify to implement audio content from Spotify on the website and also registers information on user interaction related to the audio content. 23 Days
uuid2 Used by ad nexus analytics by AppNexus 90 Days
li_sugr Used to make a probabilistic match of a user's identity outside the Designated Countries 90 Days
_kuid_ We use this cookie to target advertising that is appropriate for you online. This domain is owned by the Krux Digital. 365 Days
xs Session cookies are c_user and xs. c_user stores the username and the xs session secret, these two cookies together determine whether the user is logged in or not. 3 Months
_guid Used to identify a LinkedIn Member for advertising through Google Ads 90 Days

Other Similar Tracking Technologies We Use

Server logs

We also use server logs to collect data about visitors’ use of our websites. These logs may be reviewed for security purposes, e.g., to detect intrusions into our network. Furthermore, server log data, which contains visitors’ IP addresses could, in instances of criminal malfeasance, be used to trace and identify individuals. In such instances, raw data logs would be shared with appropriate investigative bodies authorized to investigate such breaches of security. Server logs data are kept separate. They are not automatically used to identify you or combined with any personal data you may voluntarily provide to us.

Web beacons and tags

Web beacons and tags are tracking elements (small, invisible image files or code snippets) embedded in or delivered through our webpages or emails to check whether and how users interact with our content. Their main purpose is to collect usage statistics and build analytical reports on users’ activities.

Managing Your Preferences

Strictly necessary cookies are set by default. Optional cookies are not set without your consent. You have the right to choose which optional cookies you want to set. You can always change your cookie preferences at our cookie management center or by clicking the “‘Cookie management center”’ link in our website’s footer. Any preferences you make will be automatically set.

You may also disable some or all cookies through your browser. To do so, please follow the instructions provided by your web browser or visit this section on https://aboutcookies.org to learn how to manage or delete cookies using your browser. Please note that disabling all cookies may impact the operation of our websites and your overall user experience.

Contact Us

If you have any questions about this policy, please send an email to privacy@cgi.com.