Cognism

Overview

Cognism is a B2B sales intelligence platform that specializes in identifying website visitors and enriching that data with contact-level information for sales prospecting. When Cognism scripts are embedded on a company's website, they work to de-anonymize visitors — matching IP addresses, device fingerprints, and behavioral signals against Cognism's business contact database to identify which companies and potentially which individuals are visiting the site. This data is then fed into sales workflows for outreach and lead qualification.

This type of visitor identification represents one of the more privacy-sensitive categories of third-party scripts. Unlike traditional analytics that report aggregate traffic patterns, Cognism's value proposition is explicitly about identifying who is visiting your site and making that information actionable for sales teams — often without the visitor's direct knowledge or explicit consent.

What This Script Does

Cognism scripts perform visitor identification and data enrichment on the host website:

• IP-based company identification: Scripts capture the visitor's IP address and match it against Cognism's database of business IP ranges to identify which company the visitor is associated with. This reveals the organization behind anonymous website visits.
• Behavioral signal collection: Page views, visit duration, pages visited, content categories viewed, and return visit frequency are tracked to score visitor intent and prioritize leads. A visitor who repeatedly views pricing pages signals higher purchase intent than one browsing blog posts.
• Device and browser fingerprinting: Scripts may collect browser characteristics, screen resolution, installed plugins, and other device attributes that contribute to visitor identification and cross-session matching.
• Contact record enrichment: Identified company visits are enriched with Cognism's contact database — surfacing names, job titles, email addresses, phone numbers, and LinkedIn profiles of key decision-makers at the visiting company, even if those specific individuals were not the actual website visitors.
• CRM and sales tool integration: Identified visitor data and enriched contact records are transmitted to connected CRM platforms (Salesforce, HubSpot) and sales engagement tools, triggering automated outreach workflows.
• Cookie-based tracking: Persistent cookies are set to track visitors across sessions, building engagement timelines that help sales teams understand the depth and recency of a prospect's interest.

The core function is transforming anonymous website traffic into identified sales leads — a fundamentally different purpose from analytics that aim to understand aggregate user behavior.

Consent & Compliance

Cognism's visitor identification scripts raise significant privacy concerns under multiple regulatory frameworks. Under GDPR, the de-anonymization of website visitors through IP matching and behavioral profiling constitutes processing of personal data that requires a valid legal basis. The fact that enriched contact records may include individuals who did not actually visit the site (but work at the identified company) creates additional data protection challenges.

The legitimate interest basis is difficult to sustain for visitor identification and enrichment because the processing is not reasonably expected by data subjects — most website visitors do not expect their visit to trigger the surfacing of their colleagues' contact details for sales outreach. The UK ICO and other European supervisory authorities have scrutinized similar B2B identification tools.

Under CCPA/CPRA, the collection and sharing of visitor data for sales prospecting purposes constitutes "selling" or "sharing" personal information, requiring opt-out mechanisms. Website operators must ensure that their privacy policy discloses this type of visitor identification and that consent mechanisms are in place before the scripts fire.

Should You Block This Without Consent?

Cognism scripts perform visitor de-anonymization and B2B contact enrichment — activities that are explicitly designed to identify individuals from anonymous website visits for sales prospecting. This is non-essential tracking that provides no functionality to the website visitor. The privacy implications are significant, particularly under GDPR where visitor identification without consent faces substantial regulatory risk. These scripts must not fire without explicit consent.

Yes.