Shield · Privacy

Privacy modes

Choose how much Shield may remember about visitors. All modes share the same hard floor: no passwords, no form values, no raw personal data — ever.

strict

Maximum privacy — consent denied or strict regulatory contexts.

No visitor cookieNo _fip_vid, no localStorage.
Session-only IDCookie → sessionStorage → in-memory fallback.
Minimal contextUser agent, language, timezone only. No advanced fingerprinting.

balanced default

Recommended for most websites.

Session cookie_fip_sid, 30-minute rolling.
Visitor cookieOptional _fip_vid, 30 days.
Full page contextPage, referrer, UTM; form metadata (field types, not values); standard browser metadata.

advanced

Stronger repeat-visitor detection.

Longer-lived visitor cookieConfigurable duration.
Consistency signalsExtended browser/device consistency; customer-provided hashed IDs supported.
Same hard floorStill no raw sensitive fields.

Consent integration

FindIP.init({
  siteKey: 'pub_xxx',
  consentRequired: true,
  noConsentMode: 'strict', // or 'disabled'
});

When consent is denied: noConsentMode: 'strict' continues in strict mode; noConsentMode: 'disabled' stops all tracking.

Never collected, in any mode

Credentials & paymentsPasswords, credit cards, full form contents.
Personal identifiersRaw emails, phones, names, addresses.
SurveillanceKeystrokes, mouse recordings, screenshots, full DOM snapshots.