This page is for the developer or security reviewer installing Happierleads. It covers what the tracking pixel does in the browser, every domain it talks to, the data it sends and stores, the controls you have, and how to load it only after consent.

Every domain the pixel uses is a happierleads.com domain, owned and operated by Happierleads, a UK-based company. The only exception is the public jsDelivr CDN, used only when Session Recordings is on.

With Session Recordings off (recommended for a first rollout), add these to your policy:

script-src  'self' https://rest.happierleads.com;
connect-src 'self' https://page-visits-full.happierleads.com https://tracking.happierleads.com https://session-recordings.happierleads.com;

If you later switch Session Recordings on, 

 (the recorder is loaded and run at runtime). If you load the pixel through Google Tag Manager, your policy also needs to allow Tag Manager itself, as for any GTM tag.

The pixel does not set or read cookies, and every request it makes is sent without cookies. It keeps a few housekeeping values in the browser’s local storage so it doesn’t send the same thing twice:

Privacy rules such as GDPR, PECR and ePrivacy treat browser storage the same as cookies, so put Happierleads in your analytics / marketing consent category.

Email capture: what it is and why it is on

By default the pixel looks for an email address the visitor has already given you: typed into your own forms (including browser autofill and paste), in your site’s local or session storage, in the page URL, in the Google Tag Manager dataLayer, and in your site’s own API responses.

someone who has filled in one of your forms is already known to your team. Recognising them means we don’t spend one of your credits identifying a person you already have. Generic addresses (info@, sales@, support@…) and addresses on your own domain are ignored.

None of these methods are needed to identify visitors.

 Company and person identification works without them. If email capture is switched off:

Email capture is switched off per website (or for your whole account) by our team. Ask us in chat or at 

 and we’ll do it for you. Every customer runs the same pixel file, so the email-capture code stays in the script; the configuration we serve for your website switches it off. We don’t build separate script versions per customer. An email your own code passes in 

 is always used, because your site sends it on purpose.

Session Recordings is the only feature that takes page snapshots. If you don’t need it, go to 

https://admin.happierleads.com/settings/<your-website-id>/tracking

: no snapshots are taken, nothing is uploaded and the recorder is never downloaded. When it is on, form fields are always masked and canvas content is never captured.

The same page has the other identification options (Identify Exact Visitors, Companies with Suggested Contacts, Personal Emails).

Loading the pixel only after consent (CookieYes)

 use CookieYes’s script blocking, so the browser only runs the pixel after analytics consent:

 the pixel no longer loads on any later page. To stop it on the page they are on and clear what it stored, reload the page and remove its storage keys:

The browser pixel is the recommended setup, and the only one we support. Identification depends on the visitor’s own browser contacting us: their network address, browser and the page they are on. A request forwarded from your server carries your server’s details instead, so nobody could be identified.

Questions from your security or engineering team? Reply in chat or email 

Everything a security or privacy review needs: which domains the Happierleads pixel uses, what it sends and stores, Content Security Policy rules, how to switch off email capture and page snapshots, and how to load it only after cookie consent.

Tracking Pixel: Domains, Data, CSP & Privacy Controls

Did this answer your question?

Related Articles

How does the Happierleads script work?

How the Limits and Credits work

How to add limits to workspaces

How to add a new Website to your Account

How Does HappierLeads Identify Anonymous Website Visitors?