What is the sbjs_first cookie?
sbjs_first is set by Sourcebuster.js, an open-source script frequently bundled with WooCommerce (WordPress) stores through traffic-source tracking or order attribution plugins.
The cookie is created on a visitor's first interaction with the store, when the tracking script loads and records the details of that initial session.
What data it stores
The cookie stores information about the visitor's first session: traffic source, medium (organic, referral, paid, etc.), search term, referrer domain, and the date/time of the first visit. The value is typically a string of key-value pairs separated by special characters, generated internally by Sourcebuster.js.
The data stays stored locally in the visitor's browser and is read by the plugin's script so it can later be saved to the site's own database (for example, attached to a WooCommerce order), rather than sent to an external third-party server.
What it is used for
Its main purpose is sales attribution: the store can determine which channel (organic search, a paid campaign, social media, referral) first brought a customer to the site, even if the order is placed much later.
For the store owner, this information helps evaluate the effectiveness of marketing channels and correctly calculate commissions for affiliates or partners.
Does it require consent?
CookieFix classifies sbjs_first as a statistics/analytics cookie, since its purpose is tracking traffic behavior rather than providing essential technical functionality.
- Under GDPR and the ePrivacy Directive (transposed in Romania via Law 506/2004), this type of cookie requires the visitor's prior consent.
- The site owner must list it in the cookie policy, with the correct category and actual storage duration.
- The script that sets the cookie (the attribution plugin) should be blocked until consent is given.
How to block or delete sbjs_first
A visitor can delete or block sbjs_first from their browser's privacy settings (Chrome, Firefox, Edge, Safari) under per-site cookie management, or by browsing in private mode.
Site owners should make sure the Sourcebuster script or plugin generating this cookie doesn't fire automatically on page load, but only after the visitor accepts the statistics category. A CMP like CookieFix can automatically block this script until consent is obtained, preventing the cookie from being set prematurely.
Frequently asked questions
It's a session cookie set by Sourcebuster.js, used by WooCommerce plugins to record details about a visitor's first session, such as the traffic source.
Yes, because it's used for statistical/traffic attribution purposes, it isn't strictly necessary and should only be set after the visitor gives consent.
Its typical duration is session-based, meaning it expires when the browser closes, though some implementations may vary.
It's set by the Sourcebuster.js script, usually bundled with an order attribution or traffic-source tracking plugin installed on the WooCommerce store.