12 pages · Identity and matching
Hash email. Leave the IP in the clear.
A raw email is a privacy incident. A hashed IP is an unmatchable event. Click ids die at hosted checkout. These pages are which field, which format, and which cookie actually joins.
- Hash email and phone. Leave the algorithm as SHA-256. Identity · engineers, marketers
- IP and user-agent are sent in the clear Identity · engineers
- Lowercase, trim, then hash Identity · engineers, marketers
- E.164, then SHA-256, not a local format Identity · engineers, marketers
- gclid, fbclid, ttclid, msclkid, li_fat_id Identity · marketers, engineers, PMs
- _fbp is the browser. _fbc is the click. Identity · engineers, marketers
- client_id is analytics. external_id is yours. Identity · engineers, PMs
- distinct_id is who PostHog and Mixpanel join on Identity · engineers, PMs
- Send the client IP, not the VPC NAT Identity · engineers
- The platform's graph is not your CDP Identity · PMs, engineers, marketers
- Safari will expire that cookie Identity · engineers, PMs
- Checkout on another host drops the click id Identity · engineers, marketers, PMs