CallRail

Overview

CallRail is a call tracking and conversation intelligence platform used by marketing teams, agencies, and local businesses to measure the offline conversions (inbound phone calls) generated by their online and offline marketing campaigns. The platform's core mechanism is dynamic number insertion (DNI) — replacing the phone numbers displayed on a website with unique tracking numbers that are assigned per visitor session, allowing CallRail to attribute each inbound call to the specific traffic source, ad campaign, keyword, or landing page that brought the caller to the site.

CallRail is widely used in local services (HVAC, legal, healthcare, automotive), digital marketing agencies, and any business where phone calls are a significant conversion event.

What This Script Does

CallRail's script (cdn.callrail.com/companies/.../trackdynamic.min.js) implements dynamic number insertion and call attribution across the website:

Dynamic number insertion (DNI): On each page load, the CallRail script identifies all phone numbers in the page's HTML and replaces them with session-specific tracking numbers pulled from CallRail's number pool. When a visitor arrives from a Google Ads campaign, they see a different phone number than a visitor arriving from organic search or a Facebook ad — enabling CallRail to attribute each call to the correct source.

Visitor session identification: CallRail sets a first-party cookie (calltrk_session) scoped to the current session and a persistent cookie (calltrk_uuid) with a 2-year expiry for visitor identification. The calltrk_uuid links returning visitors to their previous sessions and call history, enabling attribution across multiple visits. URL parameters and referrer data are captured and stored with the visitor record.

UTM and keyword capture: The script reads UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and Google Ads click IDs (gclid) from the URL on arrival. These are associated with the visitor's tracking number assignment so that when they call, the call record is enriched with campaign and keyword data.

Form tracking: CallRail's form tracking feature captures web form submissions alongside call events, enabling a unified view of both phone and web conversions in the CallRail dashboard and connected marketing platforms (Google Ads, HubSpot, Salesforce).

Call recording and transcription: When a tracked number is called, CallRail can record the conversation and generate an AI-powered transcript. Recordings and transcripts are stored in CallRail and can be synced to CRM platforms. This has additional legal implications in two-party consent states (California, Illinois, Florida, etc.) where recording laws require disclosure.

Keyword-level attribution: For Google Ads campaigns with keyword-level tracking enabled, CallRail assigns unique numbers at the keyword level, allowing advertisers to see which specific search terms generate phone calls and optimize bidding accordingly.

Consent & Compliance

CallRail is an analytics and marketing attribution tool with meaningful personal data collection:

• GDPR / ePrivacy: The persistent calltrk_uuid cookie (2-year expiry) and the behavioral tracking it enables (linking multiple sessions, capturing referral and campaign data) require prior opt-in consent under the ePrivacy Directive. The DNI mechanism itself changes the website's displayed content based on tracking data, which is a consequence of the tracking infrastructure. Under GDPR, the marketing attribution purpose requires consent (Article 6(1)(a)) — legitimate interests is difficult to justify given the persistent cross-session profiling.
• Call recording: Call recording raises additional consent issues. Under GDPR, recording calls requires informing all parties. In the US, recording laws vary by state — California, Illinois, Maryland, and others require two-party (all-party) consent for call recording.
• CCPA: The calltrk_uuid persistent identifier and behavioral session data constitute personal information. Sharing call attribution data with advertising platforms (Google Ads auto-tagging, HubSpot) may constitute a "sale" or "sharing" under CCPA.
• Healthcare considerations: CallRail is used by many healthcare providers. Call recordings may contain protected health information (PHI) — requiring HIPAA Business Associate Agreement (BAA) terms with CallRail.

Should You Block This Without Consent?

Yes. CallRail tracks visitors across sessions with persistent cookies, attributes phone calls to marketing campaigns, and may record call conversations. This is marketing analytics technology that requires explicit consent under GDPR and ePrivacy before activation.