Matchbax stitches together web sessions, phone calls, form submissions, and CRM outcomes into a single identity graph — with 120-signal device fingerprinting that survives cookie deletion.
Advanced analytics, enterprise authentication, automation tools, and compliance features — all shipped in one release.
Invite team members and clients directly via email with secure, time-limited signup links.
NewSelf-service password reset via SMTP-delivered secure tokens. No admin intervention required.
NewAzure AD OAuth2 single sign-on for enterprise teams. One-click login with your M365 account.
EnterpriseArchive inactive clients, add notes, and tag accounts for faster filtering in large agency setups.
NewFlexible date range presets (7d, 30d, 90d, custom) across all analytics and reporting views.
NewSwitch between first-touch, last-touch, linear, and time-decay attribution models in one click.
AnalyticsVisualise drop-off at each funnel stage — from first session through to closed deal.
AnalyticsSide-by-side channel performance charts with conversion rate and cost-per-lead breakdowns.
AnalyticsAttach deal values to attributed conversions and report revenue by channel, campaign, and source.
AnalyticsMonthly event counts, API call quotas, and per-client usage dashboards for accurate billing.
NewDaily scheduled offline conversion uploads to Google Ads via the API — zero manual exports.
NewMonitor and manage all background jobs (lead scoring, exports, sync) with status and history UI.
NewSubmit suppression requests from the dashboard. Removes identity signals and prevents future matching, with a full audit trail.
PrivacyReview and merge duplicate person nodes flagged by the identity graph — no more data fragmentation.
NewPush attributed lead data to 6,000+ apps via Zapier webhooks with configurable event triggers.
NewNative nodemailer integration for transactional emails — invites, alerts, and reports from your own domain.
NewFrom first click to closed deal — every touchpoint captured, matched, and attributed without relying on third-party cookies.
Unify web visits, inbound calls, form submissions, and CRM deals into a single customer journey. Supports UTM, gclid, fbclid, msclkid, ttclid, IDFA, GAID, and UID2.
Multi-touchCanvas rendering, WebGL GPU parameters, audio pipeline output, 65-font bitmask, media queries, speech synthesis voices, and 21 navigator signals. Persists across cookie clears.
Cookie-freeConfidence-weighted matching across email hash, phone hash, IP address, and device fingerprint. Merges duplicate person nodes automatically as new identifiers arrive.
IdentityWebSocket-powered live conversion feed delivers call, form, and CRM events to your dashboard with sub-second latency. Watch attribution happen as it occurs.
LiveWebhooks for CallRail, CTM, Gravity Forms, JotForm, and Typeform. Push attribution upstream to Meta CAPI, Google Analytics 4, and Google Ads via the official API with daily auto-upload.
IntegrationsIsolated PostgreSQL schema per client, JWT auth, Microsoft 365 SSO, email invitations, full audit logging, identity suppression tools, and role-based access across Admin, Agency, and Client tiers.
EnterpriseDrop in one script tag. The rest is automatic.
Add a single script tag. Matchbax captures UTM parameters, click IDs, referrer, and a 120-signal device fingerprint on every page load. No configuration required.
<script src="https://your-domain/attribution.js"
data-client-id="YOUR_ID"></script>
Inbound calls from CallRail or CTM, form submissions from Gravity Forms, JotForm, or Typeform, and CRM deal updates all route to the identity graph via verified webhooks.
POST /webhook/callrail
POST /webhook/form-provider/:id
POST /event/crm
Every conversion is matched back to the originating session and channel. View the full journey in your dashboard, push confirmed conversions to Meta CAPI and GA4, and score leads automatically.
Each group is hashed independently then combined. Losing any single signal (e.g. blocked AudioContext) degrades accuracy by only one seventh — the fingerprint stays highly effective.
Self-hostable via Docker. Everything open, nothing phoned home.
| Runtime | Node.js 18+ |
| Framework | Express.js 4 |
| Database | PostgreSQL 15 |
| Multi-tenancy | Isolated schema per client |
| Authentication | JWT + bcrypt, Microsoft 365 SSO |
| Real-time | WebSocket (ws 8) |
| Container | Docker + Docker Compose |
| Process manager | dumb-init (non-root) |
| Fingerprint signals | 120+ |
| Signal groups | 7 independent groups |
| Compute time | < 50 ms client-side |
| Identity model | Probabilistic graph, confidence-weighted |
| Attribution models | First-touch, last-touch, linear, time-decay |
| Match accuracy | > 95% cross-device |
| Server-side hash | SHA-256 (no raw PII stored) |
| Click IDs tracked | gclid, fbclid, msclkid, ttclid |
| Mobile ad IDs | IDFA, GAID, UID2 |
| PII storage | SHA-256 hashed only |
| Webhook auth | HMAC-SHA1 (CallRail), token (CTM) |
| Rate limiting | Configurable per window |
| Audit log | Immutable change log per client |
| CORS | Configurable origin allow-list |
| DB SSL | Configurable (Supabase-compatible) |
| GDPR suppression | Identity erasure + suppression audit trail |
| Secrets | Environment variables, never in code |
| Language | ES5-compatible JavaScript |
| Dependencies | Zero — no external libraries |
| Cache TTL | 1 hour (ETag + Cache-Control) |
| Form enrichment | Hidden-field injection + sniff mode |
| UUID persistence | First-party cookie (sliding expiry) |
| Session storage | sessionStorage fallback for SPAs |
| Lead scoring | Automated, scheduled background job |
HMAC-verified webhooks in. Enriched attribution data out — now including Google Ads API auto-upload and Zapier automation.
HMAC-SHA1 signed webhook ingestion for inbound call attribution.
Call trackingToken-authenticated CTM call webhooks with full caller metadata.
Call trackingWordPress form submission webhooks with UUID enrichment.
FormsJotForm webhook handler with automatic lead attribution.
FormsTypeform response webhooks matched back to the session graph.
FormsPush attributed lead events to Meta CAPI for offline conversion matching.
Ad platformSync attribution data back to GA4 for unified reporting.
AnalyticsDaily automated offline conversion uploads via the Google Ads API — no manual exports needed.
Ad platformPush attributed lead events to 6,000+ apps via configurable Zapier webhook triggers.
AutomationHubSpot and Salesforce CRM integrations on the roadmap.
RoadmapUnlike call-tracking tools that charge per minute, Matchbax is a flat monthly platform fee. Pick the tier that fits your client count.
Compare: CallRail charges $45–$145/mo + per-minute fees · WhatConverts from $30/mo (per-lead caps) · Hyros from $350/mo · Northbeam ~$3,000+/mo — Matchbax includes call, form, and device-fingerprint attribution in one flat fee.
Whether you're migrating from another tool, evaluating Matchbax for a client, or want a live walkthrough — we're happy to help.
Log in to your dashboard to explore the new v2.0 analytics, configure integrations, and monitor conversions in real time.
Open Dashboard →