stackpeek
← back to leaderboard

audit report

HubSpot

https://hubspot.com · crm

warn
scanned 2026-04-16 23:37:01 utc permalink · /audit/hubspot

HubSpot loaded 14 third-party domain(s), of which 4 are privacy-sensitive. 1 warn finding(s): No privacy policy found. Privacy-sensitive vendors observed: Google Analytics, Google Tag Manager, HubSpot.

findings

  1. warn

    No privacy policy found

    stackpeek could not discover a privacy policy for this page. This is unusual for anything serving real users.

    how we detected this →
  2. note

    HubSpot loaded (analytics)

    Observed 3 time(s) on the page.

    
            inline: window._hsq = window._hsq || [];window._hsq.push(["identify", {"visitor":
inline: var _hsq = _hsq || []; _hsq.push(["setContentType", "standard-page"]);
inline: ta = hbspt.targetedContentMetadata || []).push(...[]); var _hsq = _hsq || []; _hsq.push(["setTargetedContentMetadata", hbspt.
    how we detected this →
  3. note

    Google Analytics loaded (analytics)

    Observed 1 time(s) on the page.

    
            link dns-prefetch: https://www.google-analytics.com
    how we detected this →
  4. note

    Google Tag Manager loaded (tag_manager)

    Observed 1 time(s) on the page.

    
            link dns-prefetch: https://www.googletagmanager.com
    how we detected this →
  5. note

    HubSpot loaded (analytics)

    Observed 1 time(s) on the page.

    
            link dns-prefetch: https://js.hs-analytics.net
    how we detected this →

third parties observed

vendor domain category hits disclosure
Google Analytics google-analytics.com analytics 1 not named
Google Tag Manager googletagmanager.com tag_manager 1 not named
HubSpot hubspot.com analytics 3 not named
HubSpot hs-analytics.net analytics 1 not named
data:image data:image other 3 not named
hs-banner.com hs-banner.com other 1 not named
hsappstatic.net hsappstatic.net other 2 not named
hsbrowserreports.com hsbrowserreports.com other 1 not named
hubapi.com hubapi.com other 1 not named
hubspot.de hubspot.de other 1 not named
hubspot.es hubspot.es other 1 not named
hubspot.fr hubspot.fr other 1 not named
hubspot.jp hubspot.jp other 1 not named
hubspot.net hubspot.net other 3 not named

policy claims

No privacy policy could be located on this site.

response headers

hsts
yes
csp
yes
server
cloudflare

run this yourself

Every audit on this site is reproducible. Install stackpeek and run the same check against https://hubspot.com from your own machine — the tool is MIT-licensed and runs locally. 

pip install stackpeek
stackpeek audit https://hubspot.com

source on GitHub · methodology · cli docs

provenance

This audit was generated by running stackpeek against https://hubspot.com from a public IP, using only HTTP GET and standard browser headers. The findings compare the observed HTML against the policy discovery results (no policy document was located) using the public methodology. Re-scans append new findings at new permalinks and never overwrite the historical record.