Security & privacy
Attribution means handling data about your customers, so it is fair to ask where it goes. Here is exactly how Trakt treats it: first-party, hashed before it leaves, and never sent anywhere without your say-so.
Trakt collects tracking data on your own domain, not through third-party cookies shared across the web. The click ids and session data that power your attribution belong to your site and your customers, and they are not pooled into a shared cross-site data set.
How we treat identity
When customer identifiers like email or phone are used for conversion matching, they are hashed with SHA-256 before being sent to Google or Meta. Raw personal data is not transmitted to the ad platforms.
Trakt sends the minimum required to attribute and match a conversion. It is not in the business of reselling or enriching your customer data.
All data moves over HTTPS, and the connection between your store and Trakt is authenticated so events cannot be forged or tampered with.
Customer data can be removed on request, and the platform honours the standard data-deletion webhooks from connected stores. Facebook and Instagram users can disconnect and ask for Meta data to be deleted at trytrakt.com/data-deletion.
You stay in control
Shadow mode builds the exact payload Trakt would send to each ad platform and logs it without sending. You can review precisely what would be transmitted, and which fields, before a single event leaves for your ad account. When you are ready, you switch it to live. Your data is yours; Trakt is the pipe, not the owner.
Start in shadow mode and see exactly what Trakt would send before anything is transmitted.