Webhooks
Payload settings
Send only what each receiver needs.
Set these per endpoint, under Payload in the endpoint form. They apply to consent events (consent.* and cookie_consent.updated). The hashing applies to rights-request and grievance events too.
| Setting | Options | Effect |
|---|---|---|
| Purposes | All, or only the ones you tick | Other purposes are left out of purposes and summary. If none is left, the endpoint gets nothing for that event. consent.withdrawn is sent only if a chosen purpose was withdrawn |
| Forms | Consent from anywhere, or only from the collection points you tick | Consent from elsewhere (other forms, Manage my data, API, banner) is not sent |
| Detail | Every purpose of the decision, or only purposes whose choice changed | With "only changed", a resubmit with the same choices sends nothing |
| Person | Email as is, or the SHA-256 of the lowercased email | For systems that match people by hash and should not receive emails. Applies to requester_email of rights requests too |
Every endpoint gets the same event id (webhook-id) for one event. Only the body differs by settings. The endpoint card sums up its settings, for example "Purposes: Newsletter, all forms, only changed purposes, email hashed (SHA-256)".