Where organizations have additional privacy requirements, for example related to the implementation the EU General Data Protection Regulation (GDPR) FunnelEnvy offers enhanced settings which can be configured by an organization administrator.
We recommend reviewing these settings with FunnelEnvy customer success team and enabling them as necessary during the onboarding process. Once these enhanced settings are applied, they can not be turned off except by an authorized FunnelEnvy team member.
Enhanced privacy settings can be found at Org Settings > Privacy Settings and include:
IP Anonymization
Enabling a non-consent mode of operation
IP Address Anonymization
If the "Anonymize IP Address" setting is enabled, FunnelEnvy will strip the last octet (IPV4) or remove entirely (IPV6) of the visitors' IP address before storing it. Note that this means the full IP address will not be stored anywhere in our environment can can not be retrieved later.
Non-Consent Mode
FunnelEnvy's non-consent mode of operation allows granular control of personal data tracking for each website visitor request. This can be used where internal policies prohibit storage of personal data unless a visitor has explicitly given consent.
If enabled, and the consentProvided variable is set before or during snippet load, FunnelEnvy will not store and personal data associated with the visitor. In addition we will not lookup data from any underlying data sources for that visitor which may contain personal data.
To enable non-consent mode click on the "Enable non-consent mode" checkbox and click Save. The visitor's consent may be passed through local storage (in which case it will persist across sessions until changed:
window.localStorage.setItem('funnelEnvy.privacy.consentProvided', value);Alternately, the setting may be passed in as a configuration option when the funnelEnvy object is instantiated, though this value will not persist between browser sessions:
window.funnelEnvy = new FunnelEnvy({
apiUrl: url,
customerId: id,
publicCDN: cdn,
consentProvided: value
});Using either of these approaches value can be:
true - Visitor consent has been provided to store and associate personal data.
false - Visitor consent has been actively not provided or revoked.
Note that if the value is "undefined" or not provided we will assume the visitor has provided consent.