Infusionsoft

Overview

Infusionsoft, now rebranded as Keap, is a CRM and marketing automation platform targeting small businesses. Its scripts appear on websites when businesses embed Keap-hosted lead capture forms or install the Keap tracking pixel to identify visitors and trigger automated follow-up sequences. The platform is commonly used for lead generation funnels where website behavior is tied directly to CRM contact records and email automation workflows.

What This Script Does

Infusionsoft/Keap loads a tracking script typically from js.infusionsoft.com or js.keap-link.com. This script places a persistent tracking cookie (commonly _is_* or is_referral) with a multi-year expiry to assign an anonymous visitor ID to the browser. This ID is linked to any contact record created when the visitor submits a form.

When a lead capture form is submitted, the following data is collected and sent to Keap's servers: email address, name, phone number (if requested), and the tracking cookie ID used to associate the submission with prior anonymous session history. Page visit history accumulated under the tracking cookie before form submission is retroactively linked to the newly created contact record.

The script also fires page view events to Keap's analytics pipeline, recording URLs visited, timestamps, and referrer data. These behavioral signals trigger automation rules configured by the site operator (e.g., adding tags, enrolling in sequences).

Domains contacted: js.infusionsoft.com, js.keap-link.com, api.infusionsoft.com. Form submissions may also post to app.infusionsoft.com or Keap's hosted form endpoints.

Consent & Compliance

Infusionsoft's tracking pixel sets persistent cookies for cross-session visitor tracking from the moment the page loads — before any form is submitted or any consent is given. This is behavioral tracking under the ePrivacy Directive, requiring prior consent. Under GDPR, the retroactive linking of anonymous browsing history to a contact record upon form submission is profiling under Article 4(4), requiring consent under Article 6(1)(a) as the legitimate interest basis cannot override individuals' rights where marketing profiling is involved.

Under CCPA/CPRA, sharing behavioral data with Keap for the purpose of marketing targeting constitutes sharing personal information and requires disclosure and opt-out rights.

The consent category is marketing — the primary function of the tracking script is lead capture, behavioral profiling, and marketing automation triggering.

Should You Block This Without Consent?

Yes. The Infusionsoft tracking pixel sets persistent cookies and records behavioral data from first page load. This cannot be justified under legitimate interest for marketing automation purposes. The script must be blocked until valid consent is obtained under both GDPR and CCPA frameworks.