Skip to main content

First Party Fingerprint Integration

Once installed on your website, the Fingerprint agent performs these key actions:

  • Downloads the Latest Device Intelligence Script: This ensures the agent uses updated device identification methods.
  • Collects and Sends Browser Attributes: The agent sends collected data to the Fingerprint server and receives a unique visitor ID, facilitating accurate visitor identification.
  • Makes Additional Requests: These requests further enhance the accuracy of visitor identification by using an advanced identification algorithm on the server side.
info

Ensure the web application and cookies are integrated as first-party elements to achieve the best accuracy and results when using PhotonIQ Fingerprint. This first-party integration means their URLs must match the website they're associated with.

Why integrate Fingerprint as a First-party Element

Privacy is a crucial concern for many web users, so tools like ad-blockers (such as Adblock and uBlock Origin) and privacy-focused browsers (like Brave) designed to block third-party elements might interfere with fingerprinting processes and block requests to Fingerprint servers, potentially preventing the identification of all visitors to your site.

These tools restrict the Fingerprint service by maintaining a list of Fingerprint domains and blocking browser requests that match these domains. Additionally, some VPN providers might block access to our domains at the DNS level, further complicating the identification process.

To prevent this and minimize Fingerprint service interruptions, you must integrate the PhotonIQ Fingerprint service as a first-party instead of the default third-party element.

First-Party Integration Benefits

Integrating the PhotonIQ Fingerprint script as a first-party cookie on your browser offers significant advantages:

  • Accuracy Improves in Privacy-Focused Browsers: Integration as a first-party dramatically increases accuracy in browsers with strict privacy settings like Safari and Firefox, ensuring the Fingerprint script operates effectively within these environments.
  • Extended Visitor ID Lifespan and Ad Blocker Compatibility: First-party cookies have a longer lifespan, which helps maintain visitor IDs over time. Additionally, since ad blockers typically allow connections to the same site's URLs, integrating the Fingerprint agent as a first-party prevents it from being blocked, ensuring uninterrupted operation.
  • Increased Security Against Fraudsters: Making Fingerprint usage harder to detect for fraudsters adds an extra layer of security, safeguarding your data and the integrity of the identification process.

Integration Options

There are two primary strategies for integrating Fingerprint as a first party.

  • Cloud Proxy Setup (Akamai, Cloudflare)
  • Subdomain setup

Each strategy requires coordinating with your Macrometa partner to ensure proper URL mapping for first-party integration.

This is the recommended setup and involves using a cloud proxy service like Akamai, Cloudflare, or Nginx for integrating Fingerprint as a first-party. It involves forwarding traffic to the PhotonIQ server through a proxy hosted on your domain or subdomain, such as metrics.yourwebsite.com.

Benefits of Cloud Proxy

  • Cookie lifetime of up to one year (including Safari 16.4+)
  • Enhanced control and insight over identification requests
  • Secure cookie handling, scalability, and compliance management

Setting up Akamai Cloud Proxy

note

If your plan supports it, add property so that calls to the path {your-website}/api/ds/* are forwarded to fps.photoniq.macrometa.io.

To set up and Akamai proxy

  1. Log in to Akamai Control Center.
  2. In Properties, find the URL property you're setting up with Fingerprint. Create one if necessary.
  3. Select the property, go to Property Configuration Settings, and add a new rule named Fingerprint Forward Rule.
  4. Under Criteria, add IF Path matches one of /api/ds/*.
  5. In Behaviors, set Origin Server Hostname to the PhotonIQ server.
  6. Enable True Client IP Header for the Fingerprint Forward Rule.
  7. Name the True Client IP Header option True-Client-IP.