Visitor Transparency

Show your users what Fusionaly knows about their session. One API call, full transparency.

See it in action: View your own data on fusionaly.com

The Endpoint

GET /x/api/v1/me

Returns the visitor’s fingerprint and recent events:

{
  "visitorId": "69323ea6c0a1...",
  "visitorAlias": "Swift Sheep",
  "country": "es",
  "events": [
    { "timestamp": "2025-11-04T18:57:50Z", "url": "fusionaly.com/", "eventType": 1 },
    { "timestamp": "2025-11-04T18:46:18Z", "url": "fusionaly.com/", "eventType": 2, "customEventKey": "scroll:section:pricing" }
  ],
  "generatedAt": "2025-11-04T19:11:30Z"
}

Field	What it is
visitorId	The hash stored with their events
visitorAlias	Friendly name shown in dashboard (“Swift Sheep”)
country	Two-letter ISO code (or __unknown_country__ if no GeoIP)
events	Up to 25 most recent events
eventType	1 = page view, 2 = custom event

Use Cases

Privacy page widget — Show users their data with a “See what we track” button.

GDPR transparency — Prove you only collect what you claim.

Trust building — Let privacy-conscious users verify your claims.

Selecting the Website

The visitor hash includes the domain. Resolved in this order:

1. w query parameter (explicit override)
2. url query parameter
3. Request host header (default)

// Same host as tracked site
fetch("/x/api/v1/me");

// From admin, checking a specific site
fetch("/x/api/v1/me?w=example.com");

Privacy Guarantees

Daily rotation: Visitor IDs reset every day at 00:00 UTC. New salt, new fingerprint. The endpoint only shows events from the current day — no long-term tracking.

No cookies: The fingerprint is derived from request headers, not stored on the user’s device.

User-controlled: This endpoint is opt-in. You decide whether to expose it to your users.