Forget About Me

This page explains how to implement the GDPR-required Forget About Me feature in Bloomreach Content.

Prerequisites

Before you begin, enable the Public Relevance REST API. This documentation assumes you have exposed the API under the /gdpr path. You can configure a different path if needed, as described in the Public Relevance REST API documentation.

Implementing Forget About Me

With the Public Relevance REST API enabled, you can allow visitors to request removal of their personal data by sending an HTTP DELETE request to:

/gdpr/visitorinfo

Note: The /gdpr path depends on your API configuration.

To support this functionality, add a button or link to your website that triggers the DELETE request.

If you also want to delete (reset) the Consent Cookie, send a DELETE request to:

/gdpr/visitorinfo/consentCookie

Alternative Implementation

You can also implement the Forget About Me feature by deleting the visitor cookie directly using JavaScript:

_visitor

To delete the Consent Cookie in the same way, identify the correct cookie name for your domain. The cookie name is configured with the targeting:consentCookieName property. For details, see Configure Relevance Tracking Cookie Policy.

Verifying Forget About Me Functionality

To verify your implementation:

1. Navigate through several pages on your website as a visitor.
2. Retrieve your personal data using the method described in Serve Personal Data.
3. Confirm that your personal data is returned.
4. Trigger the Forget About Me request.
5. Retrieve your personal data again. The response should be:

{   
  "visitor":null,   
  "requestLogEntries":null 
}

If you do not remove the Consent Cookie or configure it to disallow tracking, a new profile will be created after the Forget About Me request is processed. To prevent this, ensure that the Consent Cookie is also deleted or set to disallow tracking when processing the Forget About Me action.