Will the installation script interfere with our client’s site or cause security issues?

No. The Trackingplan installation script is purpose-built to be lightweight, non-intrusive, and secure—similar to scripts used by trusted observability tools like Datadog and Sentry. At under 10KB, it loads asynchronously, ensuring it never blocks or delays existing page elements or scripts.

Delivered as direct source code, the script eliminates any risk of unauthorized modifications and has undergone rigorous security reviews by highly security-conscious clients, including data-driven and privacy-focused organizations. For added transparency, we provide access to the decompiled script under a signed non-disclosure agreement (NDA) upon request.

Designed with privacy and performance as priorities, the script operates solely on explicitly declared endpoints, intercepting requests to third-party vendor domains selected for monitoring. It performs local anonymization and masking within the browser or app, without introducing new cookies, storage, or cross-site tracking dependencies.

Trackingplan’s script does not collect more data than your site or app already sends to analytics providers. It observes only outgoing requests, forwarding to our backend solely anonymized, relevant data required for anomaly detection—without interfering with your application or compromising user privacy.

To learn more about our security measures and commitment to data protection, please refer to our Privacy Hub.