Cookie Notice
Last Modified: April 15, 2025
Introduction
This Cookie Notice describes the different types of cookies that may be used on the websites (our “Website”) operated by or for Press Ganey Associates LLC (“PGForsta”, “we,” “us,” or “our”) when you visit our sites, including Pressganey.com, Forsta.com, RioSEO.com, Doctor.com, and PGForsta.com. By using our websites you are agreeing that we can use cookies in accordance with this Notice.
We may change this Cookie Notice at any time. It is our policy to post any changes we make to our Cookie Notice on this page. The date that this Cookie Notice was last revised is identified at the top of this page.
Our Websites are not intended for use by children under the age of eighteen. If you have further questions, please contact us at privacy@pressganey.com.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help us improve user experience, remember preferences, and analyze website performance.
Google Analytics. We use Google Analytics, a web analytics service provided by Google, Inc. (“Google”) to collect certain information relating to your use of the Websites. Google Analytics uses cookies to help the Website analyze how users use the site. We may also use Google Analytics Advertising Features or other advertising networks to provide you with interest-based advertising based on your online activity.
Our Websites use 1st party cookies (set by PGForsta), 3rd party cookies (which are set by third parties), and other similar technologies. Below is a list of the different types of cookies that we use on our Websites, as of the effective date of this Cookie Notice.
We do not set non-essential cookies unless and until you give your consent via our cookie banner or preferences center. You can manage your cookie preferences here at any time.
Legal Basis for Processing Cookies
The legal basis for our use of strictly necessary cookies is our legitimate interest in ensuring the functionality of our Website. For all other cookie types, we rely on your consent. You may withdraw or change your consent preferences at any time using the cookie settings tool provided.
International Data Transfers
Some of the third-party vendors we use may transfer data outside of your country, including to the United States and other jurisdictions. Where applicable, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.
California Privacy Rights (for California Residents)
Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents have the right to know what personal information is being collected, shared, or sold. Our use of cookies may result in the sharing of your personal information
with third parties for purposes that could be considered a “sale” or “sharing” under California law. We do not sell your information.
For additional State specific information see our privacy policy located here.
Consent Withdrawal
You may withdraw your consent to the use of cookies at any time by adjusting your preferences in the cookie settings interface available on our Website. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Accessibility
We are committed to ensuring that our Cookie Notice is accessible to all individuals. If you require this notice in an alternative format due to a disability, please contact us at privacy@pressganey.com.
Cookies Used on Our Websites
Strictly Necessary/Essential Cookies
Purpose:
These cookies are essential for the website to function properly. They enable basic features such as page navigation, secure areas access, and transaction processing.
Non-Essential Cookies
We do not set non-essential cookies unless and until you give your consent via our cookie banner or preferences center which you can access here.
Performance Cookies (aka Analytics Cookies)
Purpose:
These cookies collect information about how visitors use a website, such as which pages are visited most often or if users get error messages. The data is aggregated and anonymous.
Functional Cookies
Purpose:
These cookies allow the website to remember choices you make (like language, region, or preferences) and provide enhanced, personalized features.
Targeting or Advertising Cookies
Purpose:
These cookies track users across websites and are used to deliver personalized ads. They also help measure the effectiveness of advertising campaigns.
Cookie Classification Table
| Cookie Name | Description | Cookie Type | Vendor / Company |
| __cf_bm | Cloudflare bot management cookie used to identify and mitigate automated traffic (bots). Helps protect sites from malicious bots; expires after ~30 minutes of inactivity. | Strictly Necessary | Cloudflare |
| _cfruid | Cloudflare rate-limiting cookie used to manage traffic and identify request origins. Essential for Cloudflare’s traffic management; expires at session end. | Strictly Necessary | Cloudflare |
| __cflb | Cloudflare Load Balancer cookie that helps direct visitor traffic to the same server for a consistent session. Used for session persistence and load balancing. | Strictly Necessary | Cloudflare |
| cf_clearance | Cloudflare cookie set after a user successfully completes a Cloudflare Captcha or security check, allowing continued site access. | Strictly Necessary | Cloudflare |
| _ga | Google Analytics cookie used to distinguish unique users and measure site usage. Typically persists for 2 years. | Performance | Google (Analytics) |
| _gid | Google Analytics cookie used to store a unique user ID for analytics; has a 24-hour lifespan for short-term visitor tracking. | Performance | Google (Analytics) |
| gat_gtag* / _gat_UA-* | Google Analytics throttle request cookies. Limits data collection on high-traffic sites. Typically expires after ~1 minute. | Performance | Google (Analytics) |
| _GRECAPTCHA | Google reCAPTCHA cookie set to provide spam/bot protection on forms. Distinguishes human users from bots as part of reCAPTCHA security checks; ~6-month expiry. | Functional | Google (reCAPTCHA) |
| _gcl_au, _gclxxxx | Google Ads conversion linker cookies. Track ad clicks and conversions for Google Ads campaigns. | Targeting | Google (Ads) |
| IDE | Advertising cookie used by Google (DoubleClick) to deliver ads on non-Google sites and personalize ad content. Helps measure ad effectiveness; typically expires after 13–24 months. | Targeting | Google (DoubleClick) |
| test_cookie | Google (DoubleClick) test cookie to check if a browser supports cookies before serving ads. | Targeting | Google (DoubleClick) |
| VISITOR_INFO1_LIVE, YSC, VISITOR_PRIVACY_METADATA | YouTube cookies used to track user preferences, estimate bandwidth (VISITOR_INFO1_LIVE), and session analytics (YSC) for embedded videos. YSC expires at session end, others after 6–8 months. | Performance / Targeting | Google (YouTube) |
| fr, _fbp | Facebook/Meta cookies for advertising and site analytics. Track visits and deliver targeted ads (Pixel). Typically last about 90 days (fr) or 3 months (_fbp). | Targeting | Meta (Facebook) |
| OptanonConsent / OptanonAlertBoxClosed | OneTrust consent cookies. Store user’s cookie preferences and record dismissal of the banner. Typically expire after 1 year. | Strictly Necessary | OneTrust |
| __hstc, hubspotutk, __hssc, __hssrc, messagesUtk | HubSpot cookies that track visitor sessions, user tokens, and chat interactions. __hstc is main tracking; hubspotutk is user identity token; messagesUtk supports chat. Typically 6-month expiry. __hssc (30 min) & __hssrc help with session/visit counts. | Performance / Functional | HubSpot |
| _mkto_trk | Marketo (Adobe) tracking cookie (Munchkin) that stores a unique visitor ID to link website behavior with a known lead; ~1 year duration. | Performance / Targeting | Marketo (Adobe) |
| Bizible cookies: _biz_dfsA, _biz_flagsA, _biz_kvpA, _biz_nA, _biz_pendingA, _biz_uid | A series of Bizible (Adobe) cookies used for B2B marketing attribution. Track user sessions, page views, campaign data. | Performance / Targeting | Bizible (Adobe) |
| mp_*_mixpanel, _mp_opt_in_out* | Mixpanel analytics cookies (name includes a project ID) used to identify users, track usage patterns, store opt-in/out preferences. Usually expires after a few months. | Performance / Functional | Mixpanel |
| driftt_aid, drift_campaign_refresh | Drift chat cookies: driftt_aid assigns an anonymous ID to a visitor. drift_campaign_refresh stores/refreshes campaign data. | Targeting / Functional | Drift |
| CALYPSO_CSRF_TOKEN | Likely a CSRF protection token (WordPress/Automattic’s Calypso or custom). Ensures form submissions originate from the same site. | Strictly Necessary | Automattic / Custom |
| _session_id, PHPSESSID, JSESSIONID, RLSSESSIDV2 | Generic session cookies for maintaining state in PHP, Java servlets, or custom frameworks. Typically expire at session end. | Strictly Necessary | Custom / Various |
| XSRF-TOKEN | Cross-Site Request Forgery (CSRF) token used by frameworks (e.g., Angular, Laravel). Ensures requests originate from the same client/session. | Strictly Necessary | Custom / Web Framework |
| _pf_id.4190, _pf_id.ad9f, _pf_ses.4190, _pf_ses.ad9f | Possibly PingFederate or “PF” session/CSRF tokens used for single sign-on. Often essential for login security. | Strictly Necessary | Ping Identity / Custom |
| aws-waf-token | AWS Web Application Firewall token for security. Validates requests and protects against malicious traffic. | Strictly Necessary | Amazon Web Services |
| AWSALB, AWSALBCORS | AWS load balancer cookies for session stickiness, ensuring subsequent requests route to the same server. | Strictly Necessary | Amazon Web Services |
| BIGipServer* / BIGipServers* | F5 BIG-IP load balancer cookies. Direct traffic to the correct server, maintaining user sessions on that server. | Strictly Necessary | F5 Networks |
| MUID | Microsoft user identifier cookie (Bing/other MS services). Used for analytics & advertising across Microsoft domains. | Targeting | Microsoft |
| bcookie, bscookie, li_gc, li_sugr, lidc, UserMatchHistory, AnalyticsSyncHistory | LinkedIn cookies for browser ID, secure ID, consent, routing, and ad/analytics. Examples: bcookie (Browser ID), lidc (routing), li_gc (guest consent), UserMatchHistory (ad retargeting). | Targeting / Functional | |
| muc_ads, personalization_id | Twitter advertising cookies tracking user interactions for personalized ads. | Targeting | |
| 6suuid | 6sense cookie for B2B marketing analytics. Tracks visitor ID for multi-channel attribution. | Targeting | 6sense |
| sp | Could be “Spotify,” “Segment,” or “SharePoint.” Usage may vary. Possibly analytics or user settings. | Performance | Unknown |
| ar_debug | Unknown; possibly custom or “AR” (Augmented Reality) debugging cookie. Could also be “Adobe Reader debug.” | Targeting | |
| r, last_run, pdf_event | Unknown or custom cookies, possibly for analytics (tracking timestamps, PDF interactions) or scheduling. | Performance | Custom |
| _ufas, _ufav, _zitok, MGZ | Unknown or custom-named cookies. Could be user-facing preferences, tracking tokens, or marketing IDs. | Performance / Targeting | Custom |
| _BUID | Possibly a marketing or analytics ID cookie for returning visitors. | Targeting | Unknown / Custom Marketing |
| pt_* | Possibly Pardot or Piano Analytics cookies. Used to store campaign/user data. | Targeting | Unknown (Pardot/Salesforce?) |
| ufcc_themesv2 | Unknown; suggests user-facing styling or themes. | Functional | Custom |
| vid | Generic “visitor ID” cookie; used by analytics or marketing to track returning users or sessions. | Performance | Unknown / Custom |
| wd-browser-id, wday_vps_cookie, WorkdayLB_SAS, PLAY_SESSION | Workday cookies for sessions, load balancing, or browser identification. Maintain user login, keep session affinity, expire on logout or inactivity. | Strictly Necessary | Workday |