The GDPR module no longer displays users IP addresses in the user profile and only stores them anonymously in the database. Anonymized means that the last two bytes of the IP address are set to 0. As a result, IP addresses cannot be assigned to individual users. The number of bytes to be set to 0 can be changed in the settings.
The IP addresses are anonymized for all actions a user takes (e.g., page views, form submissions).
Website users can easily opt out of tracking their behavior. Using the plugin, the website owner can integrate a button or link for the opt-out of tracking via Javascript.
Furthermore, the plugin provides the following events that the web application can subscribe to in order to inform the user of the successful logout or re-registration: mautic.tracking.stateChange, mautic.tracking.optin, mautic.tracking.optout
Once a contact opted out of tracking, no further activity is stored about the contact's behavior. This applies to all domains and landing pages with embedded Mautic tracking script. This is done until the opt-out cookie is deleted in the browser. If the opt-out cookie is deleted in the browser, Mautic recognizes the user as a new contact and tracks them as such.
Sending forms (for example, subscribing to the newsletter) will continue to work after an opt-out. In this case, a new contact will be created, which will not be linked to the previous, anonymously created contact. However, neither a tracking cookie is set nor will the user behavior be tracked. Only the information that has been transmitted through the form will be stored in the user profile.
Due to the opt out of tracking some Mautic features might not be working to their full extent. For this reason, the user should always be offered the opportunity to opt into the tracking again. You can place an opt-in button or link where you see fit.
If a user has initially opted out of tracking and later opts in again, a new, anonymous contact is created in Mautic. If the user completes a form at the same time as, for example, entering their e-mail address, then a new, identified contact is created. Any user behavior that may have been tracked at an earlier time will not be associated with the new contact.
If the Mautic GDPR plug-in has been installed and configured and the user has enabled DNT in their browser, their user behavior on the web application will not be tracked. If this is a new user, no anonymous contact is created in the system.
If the user fills out a form and specifies his email address, they will be created as a new contact in Mautic. User behavior will not be tracked.
The GDPR plugin adds proof of login and logout times from Mautic backend users to log accesses to the system.
All status changes of a user are recorded here. However, if a user has activated "Remember Me" or does not log out, no log entry occurs. Only a status change will be triggered by Mautic.
