GDPR Requirements

Can Tourial prevent tracking until a user agrees to the use of cookies on the host's website?

• This represents a more advanced use of Tourial - you may need a developer from your team

For companies adhering to GDPR guidelines, obtaining consent for cookie usage on their websites is mandatory. Cookies are commonly employed for monitoring user activities. Tourial's tracking system utilizes cookies to retain distinctive user information for identification purposes. Although the Tourial tracking cookie does not contain Personally Identifiable Information (PII), it qualifies as personal information since it tracks user behavior on the website.

Websites seeking cookie usage consent typically display a modest, non-intrusive UI element to inform users about their cookie practices. In the most basic scenario, users are given the option to either consent to or refuse the use of cookies. In more complex situations, the website might request permission for various cookie categories, such as those for analytics, marketing, or other tracking purposes.

Tourial monitors interactions like hotspot clicks, CTA clicks, and page views on the published Tourial, which are essential for populating the Tourial Analytics dashboard. As Tourials are often integrated via an iframe on a website, they cannot automatically adopt or respect the consent given to the host website. Ideally, Tourials should avoid independently requesting permission — this could lead to a disruptive user experience, particularly if multiple Tourials are present on the same page.

Tourial's GDPR & Privacy Settings

By default, Tourial tracks user activities (e.g., clicks within the Tourial, etc.) to provide our customers with analytics on their Tourials. We understand there might be instances where the creator of the Tourial prefers to limit tracking, either by anonymizing the IP or by completely disabling tracking. Often, the creator may wish to halt tracking until the user agrees to cookie-based tracking on the host website. Consequently, we offer several settings to restrict or deactivate tracking:

Disable IP Tracking across Tourial

When this setting is on, visitor events and sessions will not have their IP address tracked

Disable Tracking in Tourial (Do Not Track)

When this setting is on, visitor activities cannot be linked back to an individual until content is provided. Consent can be passed down to Tourial through an "cookie-consent" event. Data prior to the consent can't be linked back to a person, but analytics on anonymous data are still available in analytics. (Implementing this may require the assistance of a developer from your team).

Disable Known Leads

When this setting is on, Tourial will not track any emails within its system. This includes emails captured from filling out a form, a query paramater set in the url (e.g. tours.customer.com/tour/123?email=[e-mail]), or matched via an integrated CRM like Hubspot and Marketo.

Respecting the User's Consent for Cookie Use within a Tourial

When a user grants permission for your website to use cookies for tracking, you can inform each Tourial on your page by sending a message to activate tracking. Tourial will record events occurring within the Tourial even if Do Not Track is enabled, but it will refrain from transmitting these events to Tourial's tracking server until it receives consent from the host website.

Stand-alone Tourial Experiences (Not-embedded)

To relay the message to the Tourial iframe(s) that the user has consented to cookie use, you should execute the following JavaScript after obtaining consent:

var tourialDesktop = document.getElementById('tourial-desktop-iframe');
var tourialMobile = document.getElementById('tourial-mobile-iframe');

[tourialDesktop, tourialMobile].forEach(function(tourial) {
  if (tourial && tourial.contentWindow) {
    tourial.contentWindow.postMessage({ event: 'cookie-consent' }, '*');
  }
});

Once the Tourial iframe(s) receive this message, all events that have been logged by the Tourial up until that point will be forwarded to the Tourial tracking server, and subsequent events will also be transmitted.