Privacy and redaction

When you finish, you know which signal stops collection, what Datalyr keeps, and how to answer an erasure request. setConsent() takes four booleans: analytics, marketing, preferences, and sale. Call it before init(). The SDK stores the choice and applies it at initialization.

datalyr.setConsent({ analytics: true, marketing: false })

Withdrawing consent clears the queue, the offline queue, the stored traits, the captured email, and the journey. Withdrawing marketing or sale also stops Stripe link decoration and unloads container iframes. Until consent arrives, the SDK holds the anonymous ID in memory only. It writes no cookie and no localStorage entry.

Browser privacy signals

Signal	Default	Where you change it
Global Privacy Control	Honored	Settings → Identity & Attribution, `Respect GPC`
Do Not Track	Ignored	Settings → Identity & Attribution, `Respect DNT`
Shopify Customer Privacy API	Honored	No setting. The SDK reads it directly.

A first-party tracking domain also suppresses the server __dl_visitor_id cookie when the request carries Sec-GPC: 1, DNT: 1, or X-DL-Consent: denied.

Opt-out

Method	Effect
`optOut()`	Stops all tracking. Writes `__dl_opt_out=true`. Clears stored identity.
`optIn()`	Resumes tracking, if no other signal still blocks it.
`isOptedOut()`	Returns the current state.

privacyMode: 'strict' forces Auto Identify off and stops email prefill on Stripe links. Turn it on in Settings → Identity & Attribution with the Strict mode toggle.

What Datalyr stores

Data	Storage
IP address	Stored in clear text on the event, the visitor record, and the outgoing CAPI payload
Geo country, region, city, timezone, latitude, longitude, postal code	Derived from the request. No IP database of yours is needed.
Device fingerprint	A SHA-256 hash of timezone, language, screen size rounded to 100 px, DNT, and user agent
Traits and the captured email in the browser	Encrypted with AES-GCM in `localStorage`. Encryption failure keeps them in memory only.
Event properties	Stored exactly as you send them

We store every property you send and forward matched properties to your ad platforms. Never send a password, an access token, a full card number, a medical record, or any other regulated field.

Erase one person’s data

A Shopify customers/redact or shop/redact webhook starts an erasure job. Datalyr also accepts a manual request at [email protected].

Property	Value
Job pickup	Every 10 minutes
Identifiers matched	Email address, customer ID, and order IDs
Tables scrubbed	Events, visitors, visitor-user links, user profiles, postback request and response bodies, and the live-events view
Confirmation	Datalyr polls each delete to a terminal state before it reports success

An erasure never runs workspace-wide, so you can’t wipe a workspace by accident. Every delete carries the workspace ID plus at least one identifier of that person.

Redaction of outgoing conversions

Settings → Privacy & redaction strips sensitive-category fields from payloads sent to Meta, TikTok, Google, OpenAI, and Snapchat. See Health and wellness redaction. Redaction controls what leaves Datalyr, not what you collect. Use Settings → Filters to stop collecting something in the first place.

Verify your posture

Open your site in a private window with consent denied.
Open Live and confirm no event arrives.
Grant consent.
Reload and confirm the pageview arrives.
Turn on GPC in a test browser.
Reload and confirm no event arrives.
Call datalyr.reset() and confirm Users shows a new distinct id.

When it does not work

Symptom	Cause	Fix
Events arrive while consent is denied	You called `setConsent()` after `init()` and after the first `pageview`.	Call `setConsent()` before `init()`.
GPC does not stop tracking	Someone turned `Respect GPC` off.	Turn it back on in Settings → Identity & Attribution.
DNT does not stop tracking	`Respect DNT` is off by default.	Turn it on.
Personal data still shows in a URL path	The path itself carries it.	Add a mask in Settings → Filters.
An erasure request is not reflected	The job runs every 10 minutes and polls to completion.	Wait, then re-check. Contact support if it exceeds an hour.

Health and wellness redaction: the exact fields stripped.
Filters: stop collecting a page or an IP entirely.
Web SDK: the full consent and opt-out method list.

Get started

Installation

Revenue

Using Datalyr

Advanced

Integrations

Account & billing

Troubleshooting

Browser privacy signals

Opt-out

What Datalyr stores

Erase one person’s data

Redaction of outgoing conversions

Verify your posture

When it does not work

Next

​Consent categories

​Browser privacy signals

​Opt-out

​What Datalyr stores

​Erase one person’s data

​Redaction of outgoing conversions

​Verify your posture

​When it does not work

​Next

Consent categories

Browser privacy signals

Opt-out

What Datalyr stores

Erase one person’s data

Redaction of outgoing conversions

Verify your posture

When it does not work

Next