Privacy Tools

Lucky Orange takes privacy and privacy regulation very seriously. The browser library provides powerful tools to make compliance with privacy regulation simple and easy to implement.

By default, Lucky Orange creates a visitor profile and session immediately after it has been loaded. If your website requires opting-in to tracking features, or you'd rather just control the session lifecycle yourself, you can take advantage of the consent API.

Part of the LO.privacy API, you can control consent by calling setConsentStatus() whenever your visitor has provided consent. If the status is set to true and was previously false, a new session recording will automatically begin.

function onOptIn () {
    LO.privacy.setConsentStatus(true)
}

You can check if consent is current given using the following method:

LO.privacy.getConsentStatus()

Finally, you'll need to toggle "Require Consent" in your site's privacy settings:

Hide sensitive content

The following content is always prevented from being sent as part of a session recording:

  • Credit card numbers

  • Social security numbers

  • Keystrokes (input and textarea)

Any additional content can be hidden through the use of special CSS classes. Placing one of these classes on an element will scramble any text and blank out any images within that element.

  • lo-sensitive

  • losensitive

You can also mark specific elements as not sensitive. This, however, will not override the above list of content that is always prevented.

  • lo-not-sensitive

  • lonotsensitive

Using the above classes will affect all nested children of the given element unless a child includes a class that negates the inherited class. Ex lo-not-sensitive within lo-sensitive.

Opt-out of tracking

You can programmatically opt a visitor out of tracking with the following method on the privacy API.

LO.privacy.optOut()

The above will set a first-party cookie in the visitor's browser that will prevent them from being tracked again unless they clear their cookies. This will only affect your website, the visitor will continue to be tracked on other websites that use Lucky Orange.

Global opt out (Do Not Track)

Lucky Orange honors the browser "Do Not Track" setting in browsers that offer it. Visitors with this setting enabled will never be tracked by Lucky Orange.

Allow visitors to control their data

In order to be transparent as possible as to what data Lucky Orange has collected for a specific visitor, a self-serve data management tool is available. This tool makes it very easy for visitors to see what data has been collected during their visits, allows deletion of that data, and explains how to opt out of tracking completely across all websites using Lucky Orange.

Using this tool requires passing a visitor's unique ID as a URL parameter:

https://privacy.luckyorange.com/visitor/{VISITOR-ID}

The on-page privacy API provides a convenient method to generate the necessary link:

LO.privacy.getInfoLink()

For example, you could tie a button press to open a link to the privacy page:

<button id="privacy-button">Manage my data</button>

<script>
    document
        .querySelector('#privacy-button')
        .addEventListener('click', () => {
            window.open(LO.privacy.getInfoLink())
        })
</script>

Last updated