Allowed data
Fixed identifiers used for aggregate reporting
- Campaign, site and release identifiers.
- Page and first landing-page identifiers.
- CTA identifier and approved destination host.
- Page language and campaign code.
Prohibited data
Information this site must never collect
- Names, phone numbers, email addresses or member IDs.
- Passwords, OTPs, recovery tokens or identity documents.
- Banking, wallet, balance, deposit or transaction information.
- Raw query strings, full referrer URLs, fingerprints or journey UUIDs.
Good to know
Only the first allow-listed landing page ID may be retained for the browser session; no cross-domain storage or automatic redirect is required.