Skip to content

What the tracking script collects

This page lists what the tracking script sends to Enfonica and what it stores in the visitor's browser, so you can answer privacy questions and complete a website's cookie notice.

Sent to Enfonica

On each page view, and periodically while the visitor is active, the script sends:

  • The tracking site's code.
  • A random session ID generated by the script.
  • The page URL, including the query string, and the referrer.
  • Campaign parameters and ad click IDs from the URL: utm_*, gclid, gbraid, wbraid, dclid, fbclid, msclkid, ttclid, li_fat_id and twclid.
  • The values of Google Analytics _ga and _ga_* cookies, if present, so calls can be linked to the same session in Google Analytics 4.
  • What the browser reports about itself: the user agent, and where the browser provides them, its device type, platform and browser brand, the number of touch points and the screen width. Call Tracking keeps only the derived device category (mobile, tablet or desktop), browser family and operating system family.

Like any web request, these requests carry the visitor's IP address. Call Tracking stores the visitor's IP address and an approximate location worked out from it, such as the city and region, with each visit, so calls can be matched to visits. The location is looked up from the IP address with a geolocation provider. The IP address isn't sent to integrations.

Not collected

  • Cookies other than Google Analytics cookies.
  • Form input, page content or keystrokes.
  • The visitor's name, email or phone number. The caller's phone number is captured by the phone network when they call, not by the script.
  • Which numbers were swapped on the page.

Stored in the browser

The script keeps two values in both session storage and local storage: enfonica_session_id, a random session ID, and enfonica_last_active, the time of the visitor's last activity. The session ID identifies the visit until 30 minutes pass without activity, after which the script starts a new session. The local storage values stay until the browser's site data is cleared. The script doesn't set cookies.

For testing, the script also reads enfonica_debug_ip from session storage, or a data-debug-ip attribute on the script tag. If either is present, the script sends that IP address and Call Tracking uses it in place of the visitor's own. The script never sets this value itself.

Where data goes

Session and call data are stored by Enfonica in Australia. The visitor's IP address is sent to a geolocation provider to look up an approximate location. Calls are sent to the integrations you enable, and the caller's phone number is never sent to Google Analytics, Google Ads or Meta Ads. See Integrations overview for what each integration receives.

Requests from the browser

The script makes requests to https://ctjs.au only. See Content Security Policy.