Skip to main content
A tracking subdomain such as go.acme.com serves dl.js, event ingest, and your tracking links from your own origin. This page explains what changes. The setup procedure lives on Domains.

​
What the subdomain serves

A hostname that is not verified in your workspace returns 404 for every path. Datalyr writes the routing entry only after Cloudflare confirms ownership and issues the certificate.

​
What changes when it goes live

The server-set cookie is the point of the whole exercise. Safari caps a script-set cookie at 7 days, and it doesn’t apply that cap to a cookie the server sets.

​
What does not change

Consent still governs collection. The edge suppresses the __dl_visitor_id cookie when the request carries Sec-GPC: 1, DNT: 1, or X-DL-Consent: denied. Serving from your own origin doesn’t opt you out of GDPR, ePrivacy, or your own consent banner.

​
Requirements

  • A subdomain. An apex domain cannot carry a CNAME, so it never activates.
  • A CNAME set to DNS only. A proxied Cloudflare record blocks certificate issuance.
  • One SSL validation record, shown on the domain card.
Three hostname suffixes are rejected: datalyr.com, lyr.link, and dlyr.link.

​
Verify

  1. Open Settings → Install after the domain reads Active.
  2. Confirm the snippet src reads https://go.acme.com/dl.js.
  3. Deploy the updated snippet.
  4. Load a page in a private window.
  5. Open the browser network panel.
  6. Confirm the dl.js request goes to go.acme.com and returns 200.
  7. Open Live and confirm the pageview arrives.

​
When it does not work

​
Next