> PatientLoop proves dental marketing ROI with call tracking and attribution. Its pl_ cookies, phone number swapping and the GDPR consent required.
>
> Canonical: https://www.flowconsent.com/en/services/analytics/patientloop

Analytics

# PatientLoop

Analytics · [Official website](https://www.patientloop.com)

PatientLoop is a US marketing attribution platform for dental practices and the agencies that serve them. Its website script detects where each visitor comes from, stores ad click IDs and UTM parameters in cookies for 90 days, swaps phone numbers for tracking numbers and tags forms and booking links, so calls and appointments can be tied to campaigns and revenue. This is marketing tracking that needs prior consent.

[Block PatientLoop until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Analytics](https://www.flowconsent.com/en/services/analytics)

- Consent

  Analytics

- Prior consent

  Required

- Documented cookies

  3

- Third-party domains

  1

- Servers

  United States (script served from Google Cloud Storage; US company)

Overview

## What does PatientLoop do?

## **What is PatientLoop?**

PatientLoop is a marketing ROI and attribution platform built for dentistry, offered by Lasso MD in the United States. It is sold to dental practices, dental service organisations and, as white-label dashboards, to marketing agencies that need to prove results to their dental clients. PatientLoop connects to practice management systems such as Dentrix or Eaglesoft, uses tracking phone numbers and records calls, and links each lead and booked appointment to the marketing channel that produced it. Recent features include an AI conversion analyst and reports on why calls did not turn into bookings.

## **How PatientLoop appears on a website**

The practice website loads cdn.patientloop.com/tracking-script.js. On each visit, the script classifies the traffic source from the referrer and URL: Google, Bing or Facebook ads, organic search, social networks, Yelp, Nextdoor and even AI assistants such as ChatGPT, Gemini or Claude. It then downloads the practice configuration and replaces the phone numbers in tel: links with a tracking number matching the source, fills hidden fields in forms and adds tracking parameters to online booking links. Technology scanners detect PatientLoop through the cdn.patientloop.com script address.

## **Cookies and personal data**

The script sets a first-party cookie named source for one day and a family of pl\_ cookies for 90 days, holding ad click IDs (gclid, fbclid, msclkid, gbraid, wbraid), UTM parameters, the landing page and the referrer. It stores a session identifier named pl\_session\_id in localStorage and sends it, with the source and campaign data, when a tracking number is shown. Calls to tracking numbers are routed through PatientLoop, which can record them, so phone numbers and call content are processed as well.

## **GDPR and consent**

Storing ad click IDs for attribution and tying calls to campaigns is a marketing purpose, not something the visitor asks for. Under Article 5(3) of the ePrivacy Directive and the GDPR, the script must wait for consent. PatientLoop is a US service, so data go to the United States, and calls about dental care may reveal health information.

## **Practical steps**

- Load the PatientLoop script only after marketing consent; without consent, visitors simply see the practice's normal phone number.
- Inform callers if calls are recorded and why.
- Sign a data processing agreement covering the US transfer and call recordings.
- List the source and pl\_ cookies in your cookie policy.

Compliance

## PatientLoop and the GDPR

PatientLoop is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive)

- Risk level

  high

- Applicable regulations

  GDPR, ePrivacy Directive, HIPAA (United States)

### Impact assessment (DPIA)

A DPIA is recommended because PatientLoop combines cross-channel tracking of visitors, call recording and linkage with practice management data that concern patients' dental care. Assess the transfer to the United States, call recording notices, retention of recordings and the access agencies have to patient-level data.

### Sample text for your banner

> With your consent, we use PatientLoop to understand which advertising or website brought you to us. It stores campaign information in cookies and may show you a tracking phone number; calls may be recorded and are processed in the United States.

Cookies and trackers

## What PatientLoop sets and contacts

- Tracking method

  Attribution script cdn.patientloop.com/tracking-script.js: classifies the traffic source (search, paid ads, social, AI assistants), stores UTM parameters and ad click IDs in first-party cookies, swaps the practice phone numbers for tracking numbers, adds tracking fields to forms and decorates online booking links.

- Server location

  United States (script served from Google Cloud Storage; US company)

- Data transferred outside the EU

  PatientLoop is a US service. The script is delivered from Google Cloud and sends the session ID, traffic source, UTM parameters and click IDs to PatientLoop endpoints, so visitor data are transferred to the United States.

### Cookies set (3)

| Name            | Type      | Duration                  | Purpose                                                                                                                                                                                                                             |
| --------------- | --------- | ------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| source          | marketing | 1 day                     | Stores the classified traffic source of the visit (for example google\_paid, facebook, chatgpt or direct) to choose which tracking phone number to display.                                                                         |
| pl\_\*          | marketing | 90 days                   | Family of first-party cookies (for example pl\_gclid, pl\_fbclid, pl\_msclkid, pl\_utm\_source, pl\_landing\_url, pl\_referrer) keeping ad click IDs, UTM parameters and first-touch landing information for marketing attribution. |
| pl\_session\_id | marketing | Persistent (localStorage) | Session identifier stored in localStorage and sent with captured phone number views to link calls and bookings to the visit.                                                                                                        |

### Third-party domains contacted (1)

- `cdn.patientloop.com`

Questions

## Frequently asked questions about PatientLoop

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What does the PatientLoop script do?

It identifies where the visitor came from, saves campaign and click IDs in cookies, replaces the practice phone number with a tracking number and adds tracking data to forms and booking links. This lets the practice attribute calls and appointments to marketing channels.

### Which cookies does PatientLoop set?

A cookie named source kept for one day, pl\_ cookies such as pl\_gclid or pl\_utm\_source kept for 90 days, and a pl\_session\_id value in localStorage. All are set on the practice's own domain.

### Is consent required for PatientLoop?

Yes. Marketing attribution and call tracking are not strictly necessary for the website, so the script should only run after the visitor accepts marketing cookies.

### What happens if a visitor refuses consent?

If the script is blocked, the visitor sees the practice's normal phone number and booking links without tracking parameters. The website keeps working; only attribution for that visit is lost.

### Does PatientLoop transfer data outside the EU?

Yes. PatientLoop is a US service and its script is delivered from Google Cloud. European practices must cover the transfer with an appropriate mechanism in a data processing agreement.

Same category

## More services: Analytics

[See the whole category](https://www.flowconsent.com/en/services/analytics)

### [Lexity](https://www.flowconsent.com/en/services/analytics/lexity)

[Lexity is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Lexity supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Lexity enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/lexity)

[Analytics](https://www.flowconsent.com/en/services/analytics/lexity)

·

### [Koala](https://www.flowconsent.com/en/services/analytics/koala)

[Koala is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Koala supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Koala enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/koala)

[Analytics](https://www.flowconsent.com/en/services/analytics/koala)

·

### [Adobe Client Data Layer](https://www.flowconsent.com/en/services/analytics/adobe-client-data-layer)

[Adobe Client Data Layer is a data management and processing platform that helps businesses collect, organize, and activate their data assets. It provides data integration, transformation, and governance tools for reliable pipelines. Adobe Client Data Layer supports real-time and batch processing, quality monitoring, and compliance management. With connectors to major data sources and destinations, Adobe Client Data Layer enables organizations to unify their data infrastructure and drive informed decision making.](https://www.flowconsent.com/en/services/analytics/adobe-client-data-layer)

[Analytics](https://www.flowconsent.com/en/services/analytics/adobe-client-data-layer)

·

### [Jarvis Analytics](https://www.flowconsent.com/en/services/analytics/jarvis-analytics)

[Jarvis Analytics is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Jarvis Analytics supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Jarvis Analytics enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/jarvis-analytics)

[Analytics](https://www.flowconsent.com/en/services/analytics/jarvis-analytics)

·

### [Trovit](https://www.flowconsent.com/en/services/analytics/trovit)

[Trovit is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Trovit supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Trovit enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/trovit)

[Analytics](https://www.flowconsent.com/en/services/analytics/trovit)

·

### [Naver RUA](https://www.flowconsent.com/en/services/analytics/naver-rua)

[Naver RUA is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Naver RUA supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Naver RUA enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/naver-rua)

[Analytics](https://www.flowconsent.com/en/services/analytics/naver-rua)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)