Name

Purpose and duration

_acloggedin

• Supports login by Acuity Scheduling client if the client has an account

• January 1, 2025

ACUITY_CART

• Stores details about a client's package, gift, or subscription purchase, including the item purchased and the quantity

• Only applies to the new scheduler

• Type: localStorage

• No expiration

_client_acloggedin

• Supports login by Acuity Scheduling client if the client has an account

• January 1, 2025

_dd_cookie_test

• Tests if cookies are supported

• Expires instantly

_dd_s

• Tracks browser errors

• Four hours

_dd_site_test

• Tests if cookies are supported

• Expires instantly

_grecaptcha

• Helps reduce spam in Acuity Scheduling

• Type: localStorage

• No expiry

_ssid

• Remembers devices for anti-fraud purposes

• Four years

CART

• Shows when a visitor adds a product to their cart

• Two weeks

CHECKOUT_WEBSITE

• Identifies the correct site for checkout when checkout on your domain is disabled

• Session

client_username

• Remembers a logged in Acuity Scheduling client's username between visits

• One year

clientUser

• Stores the Acuity Scheduling client's username, OAuth2 Access Token, and OAuth2 Refresh Token. This cookie is required for functionality of logged-in clients

• 30 days

Commerce-checkout-state

• Stores state of checkout while the visitor is completing their order in PayPal

• Type: sessionstorage

• Session

Crumb

• Prevents cross-site request forgery (CSRF)

• Session

hasCart

• Tells Squarespace that the visitor has a cart

• Two weeks

Locked

• Prevents the password-protected screen from displaying if a visitor enters the correct site-wide password.

• Session

orderStatusSessionToken

• Authenticates a visitor who logs into an order status page.

• One year

PHPSESSID

• Securely authenticates a visitor during their checkout in Acuity Scheduling

• One month

RecentRedirect

• Prevents redirect loops if a site has custom URL redirects. Redirect loops are bad for SEO.

• 30 minutes

remember_client

• Remembers Acuity Scheduling client’s login details if they have an account

• 365 days

siteUserCrumb

• Prevents cross-site request forgery (CSRF) for logged in site users

• Three years

SiteUserInfo

• Identifies a visitor who logs into a customer account

• Three years

SiteUserSecureAuthToken

• Authenticates a visitor who logs into a customer account

• Three years

squarespace-announcement-bar

• Prevents the announcement bar from displaying if a visitor dismisses it

• Type: localStorage

• Persistent

squarespace-likes

• Shows when you've already "liked" a blog post

• Type: localStorage

• Persistent

squarespace-popup-overlay

• Prevents the promotional pop-up from displaying if a visitor dismisses it

• Type: localStorage

• Persistent

squarespace-video-player-options

• Remembers video player selected preferences (volume, playback speed, and quality) for videos uploaded directly to Squarespace

• Type: localStorage

• Persistent

ss_performancecookiesAllowed

• Remembers if a visitor agreed to placing Performance and Analytics cookies on their browser, if your site has a cookie banner and is restricting the placement of cookies

• 30 days

ss_marketingcookiesAllowed

• Remembers if a visitor agreed to placing Marketing cookies on their browser, if your site has a cookie banner and is restricting the placement of cookies

• 30 days

ss_sd

• Ensures that visitors on the Squarespace 5 platform remain authenticated during their sessions

• Session

Test

• Investigates if the browser supports cookies and prevents errors

• Session

TZ

• Enables a Acuity Scheduling client’s appointments to display correctly based on their time zone preferences.

• Type: localStorage

• Persistent