Getting Started

This guide will help you integrate Noxtica fingerprinting into your web application in just a few minutes.

Prerequisites

• A Noxtica account (request access via contact)
• Your Site Key (provided after account setup)

Quick Integration

Once your account is set up and you have your Site Key, add our collector to your HTML:

Automatic Collection (Recommended)

The simplest way to integrate Noxtica is with auto-initialization using run-once mode:

<script
  src="https://collect.noxtica.com/collector/noxtica-collector.js"
  data-site-key="pk_prod_your_site_key_here"
  data-auto-init
  data-auto-check-once
  async
></script>

This will:

• Collect and submit a fingerprint on the first visit
• Reuse the cached result for subsequent visits within the TTL (default: 7 days)
• Automatically record lightweight visits without re-collecting
• Use cross-tab locking to prevent duplicate submissions

Results are available via:

// Listen for results
document.addEventListener('noxtica:collected', function(e) {
  console.log('Fingerprint collected:', e.detail);
  console.log('Risk score:', e.detail.score);
  console.log('Risk level:', e.detail.risk_level);
});

// Or access directly after collection
console.log(window.noxticaResult);

Manual Collection

For more control, use the JavaScript API:

<script src="https://collect.noxtica.com/collector/noxtica-collector.js"></script>
<script>
  // Create a client with your Site Key
  const client = NoxticaCollector.createClient({
    siteKey: 'pk_prod_your_site_key_here'
  });

  // Collect and submit in one call
  client.collectAndSubmit().then(result => {
    console.log('Risk score:', result.score);
    console.log('Risk level:', result.risk_level);
    console.log('Flags:', result.flags);
  });
</script>

Smart Collection with checkOnce()

For optimal performance, use checkOnce() which respects the server-configured collection interval:

const client = NoxticaCollector.createClient({
  siteKey: 'pk_prod_your_site_key_here'
});

// Only collects if outside the check interval window (default: 7 days)
// Otherwise records a visit and returns cached result
const result = await client.checkOnce();

if (result.fromCache) {
  console.log('Using cached result, next collection in:', result.nextSubmitIn, 'days');
} else {
  console.log('Fresh collection submitted');
}
console.log('Risk level:', result.risk_level);

Site Keys

Your Site Key (pk_...) is a public identifier that authenticates requests from your domain. Each domain you add in the Backoffice gets a unique Site Key.

Important notes:

• Site Keys are public and can safely be embedded in your HTML
• Each Site Key is tied to a specific origin (e.g., https://example.com)
• The API will reject requests where the origin doesn’t match the Site Key’s registered domain

Configuration Options

const client = NoxticaCollector.createClient({
  // Your Site Key (required)
  siteKey: 'pk_prod_your_site_key_here',
  
  // API endpoint (defaults to production)
  apiUrl: 'https://collect.noxtica.com',
  
  // Collection mode: 'standard', 'minimal', or 'max'
  mode: 'standard',
});

Collection Modes

Response Format

After collecting and submitting, you receive:

{
  "success": true,
  "fingerprintId": "abc123...",
  "score": 15,
  "risk_level": "minimal",
  "confidence": 0.5,
  "flags": [],
  "details": {
    "summary": "Detected 0 risk indicator(s)."
  }
}

Risk Levels

Token Lifecycle

Behind the scenes, the SDK:

1. Requests a short-lived token from /client/token using your Site Key
2. Tokens are valid for 5 minutes after issuance
3. The SDK caches tokens and automatically refreshes when needed
4. Submissions include the token for authentication

You don’t need to manage tokens manually - the SDK handles this automatically.

Onboarding Process

1. Request access: Contact us to request a demo or get started
2. Account setup: We create your tenant account in the platform
3. Add domains: Log into Backoffice, go to Domains, and add your origins
4. Copy Site Key: Each domain gets a unique Site Key
5. Integrate: Add the script with your Site Key to your pages
6. Monitor: View fingerprints and analytics in the Backoffice dashboard

Managing Multiple Domains

Noxtica supports multiple domains per account:

• Production: https://www.yoursite.com
• Staging: https://staging.yoursite.com
• Mobile: https://m.yoursite.com

Each domain has its own Site Key. You can:

• Enable/disable domains without regenerating keys
• Rotate Site Keys if compromised
• View analytics filtered by domain

SDK Version

Current SDK version: 3.1.0 (Schema: 2026-01-08)

Next Steps

• Try the live demo to see fingerprinting in action
• Read the Backend Integration guide for server-side lookups
• Access the dashboard to explore collected data