Matchbax stitches together web sessions, phone calls, form submissions, and CRM outcomes into a single identity graph — with 120-signal device fingerprinting that survives cookie deletion.
From first click to closed deal — every touchpoint captured, matched, and attributed without relying on third-party cookies.
Unify web visits, inbound calls, form submissions, and CRM deals into a single customer journey. Supports UTM, gclid, fbclid, msclkid, ttclid, IDFA, GAID, and UID2.
Multi-touchCanvas rendering, WebGL GPU parameters, audio pipeline output, 65-font bitmask, media queries, speech synthesis voices, and 21 navigator signals. Persists across cookie clears.
Cookie-freeConfidence-weighted matching across email hash, phone hash, IP address, and device fingerprint. Merges duplicate person nodes automatically as new identifiers arrive.
IdentityWebSocket-powered live conversion feed delivers call, form, and CRM events to your dashboard with sub-second latency. Watch attribution happen as it occurs.
LiveOut-of-the-box webhooks for CallRail, CallTrackingMetrics, Gravity Forms, JotForm, and Typeform. Push attribution data upstream to Meta Conversions API and Google Analytics 4.
IntegrationsEvery client gets an isolated PostgreSQL schema. JWT-secured admin API, full audit logging, per-client webhook configs, and a shared admin dashboard with role separation.
EnterpriseDrop in one script tag. The rest is automatic.
Add a single script tag. Matchbax captures UTM parameters, click IDs, referrer, and a 120-signal device fingerprint on every page load. No configuration required.
<script src="https://your-domain/attribution.js"
data-client-id="YOUR_ID"></script>
Inbound calls from CallRail or CTM, form submissions from Gravity Forms, JotForm, or Typeform, and CRM deal updates all route to the identity graph via verified webhooks.
POST /webhook/callrail
POST /webhook/form-provider/:id
POST /event/crm
Every conversion is matched back to the originating session and channel. View the full journey in your dashboard, push confirmed conversions to Meta CAPI and GA4, and score leads automatically.
Each group is hashed independently then combined. Losing any single signal (e.g. blocked AudioContext) degrades accuracy by only one seventh — the fingerprint stays highly effective.
Self-hostable via Docker. Everything open, nothing phoned home.
| Runtime | Node.js 18+ |
| Framework | Express.js 4 |
| Database | PostgreSQL 15 |
| Multi-tenancy | Isolated schema per client |
| Authentication | JWT + bcrypt (24 h expiry) |
| Real-time | WebSocket (ws 8) |
| Container | Docker + Docker Compose |
| Process manager | dumb-init (non-root) |
| Fingerprint signals | 120+ |
| Signal groups | 7 independent groups |
| Compute time | < 50 ms client-side |
| Identity model | Probabilistic graph, confidence-weighted |
| Match accuracy | > 95% cross-device |
| Server-side hash | SHA-256 (no raw PII stored) |
| Click IDs tracked | gclid, fbclid, msclkid, ttclid |
| Mobile ad IDs | IDFA, GAID, UID2 |
| PII storage | SHA-256 hashed only |
| Webhook auth | HMAC-SHA1 (CallRail), token (CTM) |
| Rate limiting | Configurable per window |
| Audit log | Immutable change log per client |
| CORS | Configurable origin allow-list |
| DB SSL | Configurable (Supabase-compatible) |
| Secrets | Environment variables, never in code |
| Language | ES5-compatible JavaScript |
| Dependencies | Zero — no external libraries |
| Cache TTL | 1 hour (ETag + Cache-Control) |
| Form enrichment | Hidden-field injection + sniff mode |
| UUID persistence | First-party cookie (sliding expiry) |
| Session storage | sessionStorage fallback for SPAs |
| Lead scoring | Automated, scheduled background job |
HMAC-verified webhooks in. Enriched attribution data out.
HMAC-SHA1 signed webhook ingestion for inbound call attribution.
Call trackingToken-authenticated CTM call webhooks with full caller metadata.
Call trackingWordPress form submission webhooks with UUID enrichment.
FormsJotForm webhook handler with automatic lead attribution.
FormsTypeform response webhooks matched back to the session graph.
FormsPush attributed lead events to Meta CAPI for offline conversion matching.
Ad platformSync attribution data back to GA4 for unified reporting.
AnalyticsHubSpot, Salesforce, and Zapier integrations in development.
RoadmapLog in to your dashboard to configure clients, review attribution data, and monitor conversions in real time.
Open Dashboard →