How Matomo integration works

To integrate with Matomo, you need to enter the Matomo URL and site ID in the system settings of DreamApply.

Once the integration is set up, DreamApply automatically injects the required tracking script into the DreamApply portal. The script collects user interaction data, such as page views, button clicks and file downloads, and sends it to Matomo. It also captures user details, such as geographical location, device type and browser details. As a result, you can monitor and analyze this data in Matomo dashboards.

Analytics consent settings

DreamApply utilizes Matomo consent tools to ensure that user tracking preferences are applied correctly.

Matomo analytics is activated only after users grant explicit consent for analytics and metrics cookies in the DreamApply portal. If users do not grant consent, DreamApply does not collect tracking data.

You can choose from one of the following cookie consent modes:

• Implied consent: DreamApply assumes that users grant consent when they set their citizenship. All cookies are enabled automatically, and Matomo analytics tracking is activated.
• Polite bar and Assertive dialog: DreamApply displays a consent window where users can choose which types of cookies to accept. If users do not explicitly grant consent, Matomo analytics tracking remains disabled.

To control cookies, DreamApply uses the requireCookieConsent flag provided by Matomo:

1. Before storing or using any cookies, DreamApply pushes the requireCookieConsent value:

   
   _paq.push(['requireCookieConsent']);
      

2. After the user accepts analytics and metrics cookies, DreamApply pushes the setCookieConsentGiven value:

   
   _paq.push(['setCookieConsentGiven']);
      

For details, see Tracking and Cookie Consent in the Matomo documentation.

Integration disclaimer

Risks associated with the use of external code (e.g., Matomo Tag Manager)

Adding an external tag manager (such as Matomo Tag Manager, or other similarly operating analytics platforms) will necessarily cause foreign code to run within the DreamApply system. This includes both code written by the respective platform (e.g., Matomo) and code written by the authors of the tags that you manage with the help of the tag manager.

This foreign code will run within the browser session context of your users, as if it were part of the DreamApply frontend, and will have access to anything that the authenticated user is able to access. This applies both to code written by the clients themselves and to cases where malicious code may be injected into the portal by a third party (for example, in case of a security compromise, a malicious actor may potentially add their code through these integrations).

If created with malicious intent, or due to a security vulnerability, the tags may expose personal data or other data held in DreamApply to third parties. As such, the use of such external code invalidates several key security assumptions, and DreamApply may no longer be able to safeguard the security of your data.

Critical implications and limitation of liability

1. Data Access and Privacy: These integrations grant foreign code full access to client data. They may compromise data privacy and security.
2. Functionality Disruption: External scripts may disrupt or break the portal’s functionality, leading to unexpected errors or downtime.
3. Legal Liability: The client assumes sole responsibility for all legal and regulatory consequences arising from the use of external code and the sharing of data with third parties.
4. System Warranty Invalidated: The use of any external code (such as Matomo Tag Manager, or similar platforms) invalidates the DreamApply system warranty. DreamApply cannot be held responsible for the effects of external scripts or tags, including any data loss, security breaches, or portal malfunction caused by them.
5. No Direct Link or Shared Responsibility: For the avoidance of doubt, there is no direct link or shared responsibility between our company and Matomo or any other similar service provider.

Please be mindful of the tags that you add and make sure that the authors of those tags can be trusted.