Privacy, consent and data retention

The snippet sets no cookies and doesn't fingerprint devices. It stores a random visitor id in your site's localStorage and sends the page path, external referrer host, UTM parameters and ad click ids. Other query-string parameters are dropped. IP addresses are used only transiently for rate limiting and are never stored. Browsers with Do Not Track or Global Privacy Control send nothing.

Turn on Require consent for a site to store and send nothing until your consent tool calls sourcetrail('consent', true); sourcetrail('consent', false) deletes the stored id. Each site has a retention period (30–1095 days); older data is deleted daily.