Cookies used in Simpplr's Salesforce platform

TOC

Why Simpplr Uses Cookies

Simpplr uses cookies to support authentication, enhance security, improve performance, and provide analytics. This page explains the types of cookies set when using the Simpplr application, their purpose, duration, and provenance (first-party or third-party).

Cookie Categories

Cookies used in Simpplr fall into the following categories:

  • Strictly Necessary Cookies – Required for core functionality such as login, authentication, and security.
  • Preferences Cookies – Store user settings such as language or display options.
  • Statistics Cookies – Collect analytics on usage patterns to improve the platform.
  • Marketing Cookies – Track activity for personalization and targeted communications.

Each cookie can be either:

  • Persistent – Remains stored until expiry or manual deletion.
  • Session – Deleted when the browser session ends.

Cookies may also be:

  • First-party – Set directly by Simpplr.
  • Third-party – Set by partner services integrated into Simpplr.

Salesforce Platform Cookies 

Simpplr built on the Salesforce platform, which uses cookies for functionality and performance.

  • Required: Necessary for browsing and using features.
  • Functional (Preferences & Statistics): Store user preferences and gather usage insights.
  • Marketing: Track activities to deliver relevant experiences.

Note: The Salesforce platform can run without functional cookies, but doing so may reduce functionality.
For details, see Salesforce Help documentation.

Cookies for All Users (Authenticated and Unauthenticated)

This table enlists the cookies that may be set when you access Salesforce-based applications, including their name, duration, type, and purpose. These cookies support authentication, security, user preferences, and analytics.

Cookie Name

Duration

Cookie Type

Description

__Host-ERIC_PROD-<random number>

1 Minute

Required

Enterprise Request Infrastructure Cookie (ERIC) carries the cross-site request forgery (CSRF) security token between the server and the client. The cookie name indicates the server mode (PROD or PRODDEBUG) and a random number. A different token is generated for each Lightning app.

_ga

2 Years

Functional: Statistics

A third-party cookie that’s used if the site admin chooses to track site users with a Google Analytics tracking ID.

{UserId}_KMPage

1 Day

Functional: Preferences

In Salesforce Classic, used to read the last user selection for Find in View, Article Language, {DataCategory}, and Validation Status in Article Management.

{UserId}_KnowledgePageDispatcher

Session

Functional: Preferences

In Salesforce Classic, used to remember the user selection to determine whether to show Articles or My Drafts view in Knowledge.

{UserId}_KnowledgePageFilter{DataCategory}

Session

Functional: Preferences

In Salesforce Classic, used to remember the last user selection for the data category filter in Knowledge.

{UserId}_KnowledgePageFilterArticleArticleType

Session

Functional: Preferences

In Salesforce Classic, used to remember the last user selection for the article type filter for Articles view in Knowledge.

{UserId}_KnowledgePageFilterArticlePublishStatus

Session  Functional: Preferences

In Salesforce Classic, used to remember the last user selection for the publish status filter for Articles view in Knowledge.

{UserId}_KnowledgePageFilterArticleValidationStatus

Session Functional: Preferences

In Salesforce Classic, used to remember the last user selection for the validation status filter for Articles view in Knowledge.

{UserId}_KnowledgePageFilterLanguage

Session Functional: Preferences

In Salesforce Classic, used to remember the last user selection for the language filter in Knowledge.

{UserId}_KnowledgePageFilterMyDraftArticleType

Session Functional: Preferences

In Salesforce Classic, used to remember the last user selection for the article type filter for My Drafts view in Knowledge

{UserId}_KnowledgePageFilterMyDraftPublishStatus

Session Functional: Preferences

In Salesforce Classic, used to remember the last user selection for the publish status filter for My Drafts view in Knowledge.

{UserId}_KnowledgePageFilterMyDraftValidationStatus

Session Functional: Preferences

In Salesforce Classic, used to remember the last user selection for the validation status filter for My Drafts view in Knowledge.

{UserId}_KnowledgePageSortFieldArticle

Session Functional: Preferences

In Salesforce Classic, used to remember the last user selection for Sort by for the Articles view in Knowledge.

{UserId}_KnowledgePageSortFieldMyDraft

Session Functional: Preferences

In Salesforce Classic, used to remember the last user selection for Sort by for the My Drafts view in Knowledge.

{UserId}_spring_KmMlAnyoneDraftArticlesList

1 Day Required

In Salesforce Classic, used to configure layout properties for the Draft Articles view in Article Management.

{UserId}_spring_KmMlArchivedArticlesList

1 Day  Required

In Salesforce Classic, used to configure layout properties for Archived Articles in Article Management.

{UserId}_spring_KmMlMyDraftArticlesList

1 Day Required

In Salesforce Classic, used to configure layout properties for Draft Articles assigned to Me in Article Management.

{UserId}_spring_KmMlMyDraftTranslationsList

1 Day Required

In Salesforce Classic, used to configure layout properties for Draft Translations in Article Management.

{UserId}_spring_KmMlPublishedArticlesList

1 Day Required

In Salesforce Classic, used to configure layout properties for Published Articles in Article Management.

{UserId}_spring_KmMlPublishedTranslationsList

1 Day Required

In Salesforce Classic, used to configure layout properties for Published Translations in Article Management.

<namespace>_sid

Session Required

Identifies a Live Agent session. Stores a unique pseudonymous ID for a specific browser session over chat service.

52609e00b7ee307e

Session  Required

Browser Fingerprint cookie. Used to detect session security problems.

79eb100099b9a8bf

Session Required

Browser Fingerprint trigger cookie. Used to detect session security problems.

activeView

Session

Functional: Preferences

In Salesforce Classic, used to remember the last user selection for the Articles or Translations tab in Article Management.

apex__EmailAddress

1 Year

Required

Caches contact IDs associated with email addresses.

auraBrokenDefGraph

1 Week

Functional: Statistics

Used to track when a Lightning page has malformed HTML.

autocomplete

60 Days

Functional: Preferences

Determines if the login page remembers the user’s username.

BAYEAX_BROWSER

Expired on Creation

Required

Identify a unique browser subscribed to CometD streaming channels.

BrowserId

1 Year

Required

Used for security protections. Rendered on a subset of Salesforce domains, including .salesforce.com, .force.com, and the domains for Salesforce login pages, Lightning pages, and Experience Cloud sites.

calViewState

Session

Functional: Statistics

Sets the inline calendar date state in Salesforce Classic (current week selected).

caPanelState

Session

Functional: Preferences

Saves the open, closed, and height percent states of the calendar panel.

clientSrc

Session

Required

Used for security protections.

CookieConsent

1 Year

Required

Used to apply end-user cookie consent preferences.

CookieConsentPolicy

1 Year

Required

Used to apply end-user cookie consent preferences set by our client-side utility.

cookieSettingVerified

Session

Required

Used to create a popup message telling users that cookies are required.

cordovaVersion

Session

Required

Used for internal diagnostics with mobile applications.

cqcid

1 Year

Functional: Statistics

Used to track a guest shopper’s browsing activity.

csssid

Session

Required

Used to establish a request context in the correct tenant org.

csssid_Client

Session

Required

Enables user switching.

devOverrideCsrfToken

Session

Required

CSRF Token.

disco

Session

Required

Tracks the last user login and active session for bypassing login. For example, OAuth immediate flow.

FedAuth

Session Required

For the SharePoint connector, used to authenticate to the top-level site in SharePoint.

force-proxy-stream

3 Hours

Required

Ensures that client requests hit the same proxy hosts and are more likely to retrieve content from the cache.

force-stream

180 Minutes

Required

Used to redirect server requests for sticky sessions.

gTalkCollapsed

1 Year

Required

Controls whether the sidebar in Salesforce Classic is open for a user.

guest_uuid_essential_<15-char SiteID>

1 Year

Required

Provides a unique ID for guest users in Salesforce Sites. Expires 1 year after the user’s last visit to the site.

hideDevelopmentTools

Session

Functional: Preferences

Used to determine whether to show the developer tools.

hideFilesWarningModal

50 Years

Functional: Preferences

Stores the user acknowledgment that a public link to a Salesforce file is on email send. The warning window isn’t continually shown after the user acknowledges this action.

hideIdentityDialog

1 Year

Functional: Preferences

Hides the dialog box that informs that the current user is logged out when switching to another user.

idccsrf

Session

Required

Tracks CrossSiteRequestForgery validation for certain single sign-on (SSO) flows.

ideaToggle

Session

Functional: Preferences

Show the Ideas list view or the Feed list view.

inst

Session

Required

Used to redirect requests to an instance when bookmarks and hardcoded URLs send requests to a different instance. This type of redirect can happen after an org migration, a split, or after any URL update.

iotcontextsplashdisable

10 Years

Functional: Preferences

For the IoT product, stores user preference of whether to show the Context Splash popup.

language

Session

Required

Identifies the language for custom components, surveys, and flows, which support multiple languages. Without this cookie, translations for custom features can appear incorrectly.

lastlist

Session

Required

Used to store the cookie name for the last list URL.

liveagent_invite_rejected_

Session

Functional: Statistics

Instructs Live Agent not to reissue an invitation on the same domain. Deletion of this cookie degrades the customer’s experience because they can get repeated invitations.

liveagent_sid

Session

Required

Identifies a Live Agent session. Stores a unique pseudonymous ID for a specific browser session over chat service.

lloopch_loid

1 year Required

Determines whether to send the user to a specific portal login or an app login.

login

60 Days

Functional: Preferences

If the user’s session has expired, used to fetch the username and populate it on the main login page when using the process builder app.

oinfo

3 Months

Functional: Statistics

Tracks the last logged in org.

pc-unit

1 year

Functional: Preferences

Sets a preference for displaying platform cache units to either MB or KB.

PreferredLanguage

1 Year

Functional: Preferences

Stores the user language preference for language detection and localized user experience.

promptTestMod

30 Days

Required

Stores whether test mode is in effect. This cookie is read-only.

redirectionWarning

1 Year

Functional: Preferences

Enables the customer to store URLs that are exempt from setting a redirect warning interstitial page on an allow list.

RRetURL

Session

Required

Used with Log in As to restore the original state.

RRetURL2

Session

Required

The return URL to redirect to when logging out of a session.

RSID

Session

Required

Session ID and login as session ID. In this case, the cookies are copied to the response and cause the target URL to rebuild appropriately in a proxy situation. The cookies aren’t created, examined, or modified.

schgtclose

0

Functional: Preferences

Deprecated feature, not used.

SetupDomainProbePassed

Session

Required

Salesforce moves all Setup pages to the *.salesforce-setup.com domain in Winter ’25. This cookie is required to ensure that the server properly handles loading Setup on the correct domain.

sfdc_lv2

1 Year

Required

Stores device activation details for users. If the cookie isn’t set or it expires, users must verify their identity the next time that they log in. Identity verification requires a verification method such as SMS, an authenticator app, or a security key.

sfdc-stream

3 hours

Required

Used to properly route server requests within Salesforce infrastructure for sticky sessions.

showNewBuilderWarningMessage

100 years

Functional: Preferences

Used to show or hide a warning message for the new dashboard builder.

sid

Session

Required

The Session ID used to authenticate Lightning Platform Soap-API and Rest-API data connections for the current user.

sid_Client

Session

Required

Used to detect and prevent session tampering.

sidebarPinned

10 Years

Required

Controls the state of the Salesforce Classic sidebar.

ssostartpage

1 Year

Required

Identifies the Identity Provider (IdP) location for single sign-on (SSO). Certain service provider initiated SSO requests can fail without this cookie.

SUCSP

Session

Required

Used when the user identity that an administrator is assuming, via Log In as Another User, is a Customer Success Portal (CSP) user.

SUPRM

Session

Required

Used when the user identity that an administrator is assuming, via Log In as Another User, is a Partner Relationship Management (PRM) portal user.

t

Expired on Creation

Functional: Statistics

Used to avoid duplicate access checks.

useStandbyUrl

Not Set

Required

Controls how quickly to set the standby URL when loading the softphone.

waveUserPrefFinderLeftNav

100 Years

Functional: Preferences

Preference for left navigation UI in CRM Analytics

waveUserPrefFinderListView

100 Years Functional: Preferences

Preference for displaying list views in CRM Analytics.

webact

1 Year

Functional: Preferences

Used to collect metrics per page view for personalization.

WelcomePanel

1 Day

Functional: Preferences

Stores Salesforce preferences.

Analytics Cookies

Cookie name Purpose Duration Provenance Domain Usage Notes
rl_anonymous_id, rl_page_init_referrer, rl_session, rl_user_id, rl_trait Statistics Persistent First party .abc.com, .cookies.xyz App analytics Set by RudderStack integration
_cf_bm Bot management Persistent Third party .uvw.com Cloudflare bot management Not related to analytics

Other Integrations

  • Google Analytics 4 (GA4) – Cookies set only if enabled by the customer. See GA4 Help.
  • Aisera – Cookies set only if enabled by the customer.
Was this article helpful?
0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.

Articles in this section

See more