Security & Technical Specifications

This page details the technical characteristics of the Click2Buy scripts and the security configurations required for a successful integration.

Technical Specifications

• Lightweight: The library is approximately 10 KB. Our developers have optimized this weight to preserve the performance and loading speed of your site.
• Asynchronous & Deferred: The loading of our script is deferred and asynchronous. It is loaded in parallel and does not block the rendering of your page (UX).
• Native JavaScript: Our script is developed entirely in native JavaScript. No external frameworks (like jQuery) are required, avoiding unnecessary overhead.

Security (Content Security Policy)

If your website uses a Content Security Policy (CSP), you must authorize Click2Buy's domains to ensure the tag functions correctly.

Recommended Configuration

You can authorize all Click2Buy sub-domains using wildcards:

• *.clic2buy.com
• *.click2buy.com

Mandatory Specific Domains

If you prefer to authorize specific domains only, please include the following:

Domain	Role
rs.clic2buy.com	Script Hosting: Where the integration scripts are stored.
t.clic2buy.com	Cookie Management: Used for anonymous session tracking and attribution.
analytics.clic2buy.com	Data Collection: Used to record sales validations.

Cookies & Privacy

Click2Buy is fully compliant with GDPR standards. Our tags do not collect any personal data (PII).

• Recognition: We use a first-party cookie on the clic2buy.com domain to identify users coming from our "Where to Buy" solutions.
• Cookie Name: fingerprint-0.0.4
• Duration: 365 days.
• Size: 32b.

For more details regarding our privacy policy, you can contact our DPO at dpo@click2buy.com.