Privacy and Legal Considerations
Built-in Tracking is privacy-friendly by design
The built-in provider stores no personal data — IP addresses are hashed with daily rotating salts, no cookies are set, and no browser fingerprinting is used. In most jurisdictions, this does not require cookie consent or a privacy policy entry.
External providers require cookie consent
If you enable Matomo or Google Analytics 4, you are responsible for adding these services to your cookie consent mechanism and privacy policy as required by applicable regulations (GDPR, ePrivacy, CCPA, etc.).
Matomo and Google Analytics 4 are external services with their own data collection policies. When you enable these providers:
- You are responsible for ensuring compliance with applicable privacy regulations (GDPR, ePrivacy, CCPA, etc.) in your jurisdiction.
- Include the respective service in your cookie consent mechanism if required.
- Update your privacy policy to mention the use of Matomo and/or Google Analytics for affiliate click tracking.
- Review the data processing terms of each service:
ASA2 Tracking sends click event data to these services on your behalf. The plugin does not control how Matomo or Google processes this data.