A CORS (Cross-Origin Resource Sharing) policy error occurs
when a browser blocks a script or API call from a different domain than the one
the page is hosted on. This can affect Visual Visitor tracking in specific
scenarios where click-tracking or attribution needs to share data across
domains.
When does CORS affect Visual
Visitor?
· Cross-domain UTM tracking: If you are running an email campaign and the AI Sales Rep email
links go through a third-party redirect or tracking URL (different domain than
your website), the referral data may not pass correctly due to CORS
restrictions. Solution: ensure your AI Sales Rep call-to-action links go
directly to your website URL with UTM parameters appended, not through an
intermediate redirect domain.
· Click attribution in multi-domain setups: If your business uses multiple domains (e.g., a marketing
landing page domain and a main product domain), CORS restrictions may prevent
Visual Visitor from linking visitor sessions across those domains. Install a
separate tracking script on each domain.
· Third-party script loading: Some site builders or CSPs may block the Visual Visitor script's
API calls back to Visual Visitor servers due to CORS. In this case, the script
loads but the data cannot be transmitted. Check the browser console for CORS
error messages.
How to diagnose a CORS issue
1. Open your website in a browser and
open Developer Tools (F12 > Console tab).
2. Look for any red error messages
that include CORS or Cross-Origin.
3. If CORS errors reference the
Visual Visitor domain, contact Visual Visitor Support with the full error
message so the team can investigate and provide the correct CORS configuration.
Most customers never encounter CORS issues - this
primarily affects advanced multi-domain or custom implementation setups.
Related Articles
How to Allow the Visual Visitor Script in Your Content Security Policy (CSP)
A Content Security Policy (CSP) is a browser security feature that restricts which external scripts and resources can load on your website. If your site enforces a strict CSP and the Visual Visitor domain is not whitelisted, the tracking script will ...
Why Is My Tracking Script Not Firing After Installation? (Cache and GTM Publishing Issues)
If you have installed the Visual Visitor tracking script but your dashboard is showing zero visitors, one of the following issues is most likely the cause: · Cache not cleared: WordPress sites using caching plugins (WP Rocket, LiteSpeed, W3 Total ...
Allowing Our Script in Your Content Security
If your website uses a Content Security Policy (CSP), you may need to explicitly allow the Visual Visitor script to load. How to Allow the Script Log in to your website hosting platform, CMS, or security tool (for example: Cloudflare, WordPress ...
Adding Visual Visitor to your Webflow Site
To add custom scripts to your Webflow site, you have options depending on whether you want the script to apply site-wide, or to specific pages. Here's how you can do it: 1. Adding Site-Wide Scripts: If you want a Visual Visitor to run across your ...
Tracking Script Installed but No Data Captured: Common Configuration Issues
If the Visual Visitor tracking script is confirmed to be installed on your website but visitor data is still not appearing in the dashboard, one of three configuration issues is usually the cause: a zero-ID budget threshold, a script conflict, or an ...