Overview


Formulayt can respect browser-based privacy directives:

  • doNotTrack (DNT)

  • globalPrivacyControl (GPC)


When enabled at the account level, these signals tell Formulayt to limit tracking, cookies, and pre-population for affected users.


You control this behaviour with a single setting:


Setup → Settings → Privacy → Respect browser privacy directives


  • When this toggle is ON: Formulayt automatically changes its behaviour for users who have DNT/GPC enabled (see below).

  • When this toggle is OFF: Formulayt ignores DNT/GPC for its built-in behaviour, but still exposes a data source so you can handle it yourself in fields and custom event code.


In all cases, Formulayt doesn't suppress your custom events – they always fire. You can use the browser-privacy data source to decide what your JS does.

What are doNotTrack and globalPrivacyControl?


These are browser or extension-based privacy controls:

  • doNotTrack (DNT) – a long-standing browser signal indicating the user does not want to be tracked.

  • globalPrivacyControl (GPC) – a newer signal used by privacy-focused browsers and extensions.


Users enable these in their browser settings or via privacy tools. Formulayt can detect these and, if configured, adjust its behaviour accordingly.

1. Platform behaviour when “Respect browser privacy directives” is ON


When you enable:


Setup → Settings → Privacy → Respect browser privacy directives


and a visitor has doNotTrack or globalPrivacyControl enabled, Formulayt will:


1.1 Limit Formulayt’s own tracking

  • No interaction tracking is sent to Formulayt Insights.

  • No automatic tracking calls are sent from Formulayt’s own integrations to external platforms (where applicable).


1.2 Disable pre-population of personal data

  • No personal data is used for pre-populating fields.

  • MA-based pre-pop (e.g. Eloqua/Marketo) is disabled.

  • Pre-pop from previous submissions stored in the browser is disabled.

  • Non-personal pre-pop (e.g. UTMs) is not affected.


1.3 Avoid setting Formulayt cookies

  • Formulayt does not drop its own cookies for those users.

  • Cross-domain/session tracking implemented via Formulayt cookies will not work for them.


1.4 Form rendering and submissions still work

  • Gates still render.

  • Forms can still be submitted as normal (unless other tools on the page interfere).

2. Behaviour when the toggle is OFF


If you do not enable:


Respect browser privacy directives


then Formulayt does not change its built-in behaviour when DNT/GPC are present:

  • Tracking, cookies, and pre-pop run as normal.

  • However, the privacy signal is still exposed via a data source, so you can implement your own logic in fields and Event System code.


This is useful if you want full, custom control over how browser privacy signals are interpreted, or if you’re handling consent/opt-out logic via other tools and just want visibility into DNT/GPC.

3. Browser privacy data source


Regardless of whether the toggle is ON or OFF, Formulayt exposes a data source you can use:

  • Browser → DoNotTrack/GlobalPrivacyControl is active 


This indicates whether the user has an active browser privacy directive (DNT/GPC) that Formulayt has detected.


You can use this data source:

  • In field rules – to hide/disable or alter fields for high-privacy users.

  • In the Event System – to conditionally run custom JavaScript.