TapCub is live — analytics, insights and live chat, free on one platform
Glossary

What is identity resolution? Deterministic vs probabilistic matching

Identity resolution links the anonymous visitors, devices and accounts that belong to the same person. Deterministic vs probabilistic matching, how it changes your numbers, edge cases and privacy.

Chen Yu Reviewed by Ethan Brooks Also called identity stitching Last updated Nov 4, 2026 Glossary

Quick answer

Identity resolution is the process of recognising that different identifiers, such as anonymous visitor ids, device ids, login ids and email addresses, belong to the same person, and linking them into one profile.

What is identity resolution?

Identity resolution connects the different identifiers one person leaves behind (an anonymous visitor id in a browser, a device id in an app, a login id, an email address) and treats them as one person. Without it, someone who browses on their phone and buys on their laptop looks like two people, one who never converts and one who converts instantly.

Deterministic vs probabilistic

DeterministicProbabilistic
Links whenIdentifiers share an exact key (same login id, same hashed email)Signals look similar (IP, device model, time, behaviour)
AccuracyHighLower; false merges happen
CoverageOnly people who log in or identify themselvesCan include anonymous people
Privacy riskLower and easier to explainHigher; often treated like fingerprinting

Most analytics use deterministic matching. Probabilistic matching is more common in advertising, and regulators and browsers have pushed back on it.

How merging changes your numbers

The same period, counted at three layers (sample numbers):

LayerCountWhy it differs
Visitor ids10,000Includes the same browser returning under a new id
Devices8,2001,800 fewer: repeat visits from the same device merged
People6,5001,700 fewer: one person on several devices merged

Conversion per person is higher than conversion per visitor, because the denominator shrinks. Neither is wrong; they answer different questions. Say which one a report uses.

An identity graph

person u_123
├─ login id: u_123
├─ email: (hashed)
├─ device A (phone app)    bound at first login, earlier anonymous events backfilled
├─ device B (laptop)       bound at login
└─ visitor ids on device B before login → backfilled to u_123

Edge cases

  • Shared devices. A family laptop or a shop's tablet logs in as several people. Each login should move the device to the new person without rewriting the previous person's history.
  • Junk ids. Code that sends guest, null, 0 or -1 as a user id merges thousands of strangers into one "person". Block such values.
  • Too many devices. A person with hundreds of devices is usually a test account or a bot; cap and alert.
  • Logout. After logout, new activity should stop being attached to the person.

Privacy considerations

Linking identifiers to a person creates personal data. Use deterministic keys you can explain, collect consent where your rules require it, hash emails and phone numbers, and make sure one person's linked data can be found and deleted on request. This is general information, not legal advice.

Identity resolution in TapCub

TapCub uses deterministic matching only. In identified mode, tapcub.login(id) binds the device to a login id; the first login on a device backfills that device's earlier anonymous events to the person. If the device later logs in as someone else, existing rows stay with the first person and a new session starts for the new one. bind adds other ids (email, mobile, OpenID, UnionID; up to five each); emails are lowercased and hashed. Blocked values such as null, guest, all zeros and -1 are rejected, and a person keeps at most 50 devices by default. Every bind, switch and split is logged on All-platform analytics › Users › Identity map, with a card showing how many extra visitors and devices identity removed. The website script does not use fingerprinting to link people across devices. See also user id and identify.

See also: Digital analytics.

Was this explanation clear?

We use your answers to fix and expand this page.

Chen Yu

Technical Engineer

Focuses on tracking code, SDKs, and API integrations, with practical guidance on implementation checks and troubleshooting.

FAQ

Questions people ask

Short answers to the follow-up questions that come up most.

Still have a question?

Chat with the team behind TapCub — we usually reply within a few hours on business days.

What is the difference between deterministic and probabilistic identity resolution?

Deterministic matching links identifiers only when they share an exact key, such as the same login id. Probabilistic matching guesses from signals like IP address, device and behaviour, which reaches more people but makes mistakes.

Why does identity resolution lower my user count?

Because one person on a phone and a laptop was counted twice before. Merging them gives a smaller, more accurate number of people.

What is an identity graph?

The stored map of which identifiers belong to which person, along with when and how each link was made.

Is identity resolution allowed under GDPR?

Linking identifiers to a person creates personal data, so you need a lawful basis (often consent for analytics cookies or device ids), transparency, and the ability to delete the profile on request. This is general information, not legal advice.

See this number on your own site

Add one script tag for web and apps, and the first reports fill in within minutes.

See your data clearly. Find your growth.

Every click, backed by data. Install one line of code and see your first numbers in a minute.

No credit card · Free plans for analytics and chat · Cookieless analytics