Marketo

Overview

Marketo (now part of Adobe) is a marketing automation and email platform primarily used by B2B companies for lead generation, scoring, and nurture campaigns. Its JavaScript tracker (Munchkin) builds behavioral profiles of website visitors to drive automated marketing workflows.

What This Script Does

The Marketo Munchkin script is a persistent behavioral tracker that operates on every page load:

• Page view tracking: Records every page the visitor views, including the full URL, referrer, and query parameters. Each page view is sent to Marketo's servers in real time.
• Persistent cookie: Sets a first-party cookie (_mkto_trk) with a long expiration (typically 2 years) to identify visitors across sessions. This cookie links anonymous browsing history to a known lead record when the visitor submits a Marketo form or clicks a tracked email link.
• Form tracking: Captures all Marketo form submissions (and optionally non-Marketo forms) including field values. Form data is sent to Marketo's servers and associated with the visitor's cookie-based profile.
• Click tracking: Monitors outbound link clicks and custom events defined by the site owner.
• Identity stitching: When a visitor clicks a link in a Marketo email, the mkt_tok URL parameter connects the anonymous cookie profile to a known contact record in Marketo's database, retroactively associating all prior browsing history with that individual.
• Lead scoring signals: All collected behavioral data feeds into Marketo's lead scoring models, which assign point values to activities (page views, form fills, email clicks) to prioritize sales outreach.
• API calls: The Munchkin script makes requests to munchkin.marketo.net on every page load and interaction event.

The script builds comprehensive behavioral profiles that combine browsing history, form submissions, email engagement, and custom events into unified lead records.

Consent & Compliance

Marketo is a marketing and analytics tool with significant privacy implications:

Under GDPR/ePrivacy:

• The Munchkin script requires explicit opt-in consent. It sets a persistent tracking cookie, builds detailed behavioral profiles, and transmits personal data to a third-party processor (Adobe/Marketo).
• The identity stitching feature — retroactively linking anonymous browsing to a known individual — is particularly sensitive under GDPR's data minimization and purpose limitation principles.
• Marketo forms that collect personal data require their own lawful basis (typically consent), separate from the tracking consent.

Under CCPA:

• Marketo's data collection must be disclosed in the privacy policy.
• If Marketo data is used for cross-context behavioral advertising, it may constitute a sale/share requiring opt-out mechanisms.

Under ePrivacy:

• The _mkto_trk cookie is non-essential and requires consent before being set.

Should You Block This Without Consent?

Yes. Marketo Munchkin is a comprehensive behavioral tracking system that builds detailed visitor profiles for marketing automation. It sets persistent cookies, tracks all page views and interactions, and performs identity stitching. This requires explicit opt-in consent under GDPR/ePrivacy. Block the Munchkin script entirely until marketing consent is granted. Marketo forms can be loaded separately if needed, but they should also be gated behind consent if the tracking script is active.