Data flow and privacy boundary

The public embed receives a tracking key, collector URL, script URL, and session reference. The private Integration API key stays on your server and is never required to collect browser events.

The embed can be configured to redact printable keyboard values and reduce page URLs to their origins. A platform should enable these controls according to its own privacy requirements and ensure the page's CSP permits the expected origins.

LimeSurvey's reference plugin goes further: it does not send survey answers, participant attributes, LimeSurvey tokens, or its private organization key to Ramon. It maps a random UUID through a plugin-owned hidden field and table.

This technical documentation does not replace your legal, privacy, or retention assessment for a particular deployment.