Privacy Mode

Jitsu can work in privacy mode which makes it compatible with GDPR, CCPA (California's version of GDPR), PECR (UK's GDPR). In this mode Jitsu:

• Won't use cookies to identify users; instead of cookies, Jitsu will use fingerprints which is sufficient enough to identify users.
• Won't record the full IP address of the user. Instead, only the first 3 octets will be recorded which is just enough to resolve the country and city

To switch on privacy mode, use the privacy_policy parameter (or data-privacy-policy) following the configuration parameter:

const { jitsuClient } = require('@jitsu/sdk-js');
const jitsu = jitsuClient({
    key: "[API_KEY]",
    privacy_policy: 'strict'
});

or

<script src="%%SERVER%%/s/lib.js"
        data-key="JITSU_API_KEY"
        data-privacy-policy="strict"
        defer></script>
<script>

privacy_policy=strict is just a shortcut for cookie_policy=strict and ip_policy=strict configuration. You can configure them separately:

const { jitsuClient } = require('@jitsu/sdk-js');
const jitsu = jitsuClient({
    key: "[API_KEY]",
    ip_policy: 'strict' as Policy,
    cookie_policy: 'strict' as Policy
});

or

<script src="%%SERVER%%/s/lib.js"
        data-key="JITSU_API_KEY"
        data-cookie-policy="strict"
        data-ip-policy="strict"
        defer></script>
<script>

Geo Targeting#

Jitsu can detect users country with MaxMind and if the country is in EU or is UK then the behavior will be like privacy_policy=strict. Otherwise, there won't be any restriction on using cookies or storing IP address. For using geo targeting use comply policy value like in the following example:

const { jitsuClient } = require('@jitsu/sdk-js');
const jitsu = jitsuClient({
    key: "[API_KEY]",
    cookie_policy: 'comply' as Policy,
    ip_policy: 'comply' as Policy
});

or

<script src="%%SERVER%%/s/lib.js"
        data-key="JITSU_API_KEY"
        data-cookie-policy="comply"
        data-ip-policy="comply"
        defer></script>
<script>

In addition, read JS SDK parameters reference.