# Visitor routes: forget, identify, merge

URL: /code/api/visitor/verbs · Id: `page:code/api/visitor/verbs`

> The Visitor Verbs forget, identify, merge as api.sb routes, with inputs, result, refusals and an example.

Reference for [Visitor](/business/nouns/visitor), one group of [Visitor routes](/code/api/visitor).

### Visitor.forget
Forget masks a person’s captured data across every Event and Recording and suppresses further capture, keeping the records. [Verb page](/business/nouns/visitor/forget?interface=api).

```text
POST /{namespace}/visitors/{visitor}/forget
```

Path: `visitor`. Body, as JSON: the other inputs. Emits [`Visitor.forgotten`](/business/events/Visitor.forgotten).

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `visitor` | [Visitor](/business/nouns/visitor) | Yes | The Visitor to forget. |
| `request` | `text` | Yes | The privacy request it answers. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `visitor` | [Visitor](/business/nouns/visitor) | Yes | The Visitor, masked. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```bash
curl -X POST https://api.sb/leaseline.app/visitors/visitor_M5gHadysq9/forget \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"request":"Example request"}'
```

```json
{
  "api": "https://api.sb/leaseline.app",
  "visitor": {
    "$id": "https://api.sb/leaseline.app/visitors/visitor_M5gHadysq9",
    "$type": "Visitor",
    "firstSeenAt": "2026-10-22T12:00:00Z"
  },
  "action": {
    "$id": "https://api.sb/leaseline.app/actions/act_br07HsG8MG",
    "operation": "Visitor.forget",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/leaseline.app/actions/act_br07HsG8MG"
  }
}
```

### Visitor.identify
Identify joins a Visitor to the Contact it turns out to be, so earlier Visits count toward that person. [Verb page](/business/nouns/visitor/identify?interface=api).

```text
POST /{namespace}/visitors/{visitor}/identify
```

Path: `visitor`. Body, as JSON: the other inputs. Emits [`Visitor.identified`](/business/events/Visitor.identified).

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `visitor` | [Visitor](/business/nouns/visitor) | Yes | The Visitor. |
| `contact` | [Contact](/business/nouns/contact) | Yes | The Contact or Customer the Visitor is. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `contact` | [Contact](/business/nouns/contact) | Yes | The Contact, with the Visitor’s Visits attached. |
| `visitor` | [Visitor](/business/nouns/visitor) | Yes | The Visitor, now joined to its Contact. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```bash
curl -X POST https://api.sb/leaseline.app/visitors/visitor_M5gHadysq9/identify \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"contact":"contact_WsrosCQi6J"}'
```

```json
{
  "api": "https://api.sb/leaseline.app",
  "contact": {
    "$id": "https://api.sb/leaseline.app/contacts/contact_WsrosCQi6J",
    "$type": "Contact",
    "email": "marcus@riversideproperty.com",
    "phone": "Example phone"
  },
  "visitor": {
    "$id": "https://api.sb/leaseline.app/visitors/visitor_M5gHadysq9",
    "$type": "Visitor",
    "firstSeenAt": "2026-10-22T12:00:00Z"
  },
  "action": {
    "$id": "https://api.sb/leaseline.app/actions/act_br07HsG8MG",
    "operation": "Visitor.identify",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/leaseline.app/actions/act_br07HsG8MG"
  }
}
```

### Visitor.merge
Merge joins two Visitor ids that belong to one person and keeps both as aliases. [Verb page](/business/nouns/visitor/merge?interface=api).

```text
POST /{namespace}/visitors/{visitor}/merge
```

Path: `visitor`. Body, as JSON: the other inputs. Emits [`Visitor.merged`](/business/events/Visitor.merged).

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `visitor` | [Visitor](/business/nouns/visitor) | Yes | The Visitor to merge. |
| `into` | [Visitor](/business/nouns/visitor) | Yes | The Visitor that remains. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `visitor` | [Visitor](/business/nouns/visitor) | Yes | The remaining Visitor. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```bash
curl -X POST https://api.sb/leaseline.app/visitors/visitor_M5gHadysq9/merge \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"into":"visitor_M5gHadysq9"}'
```

```json
{
  "api": "https://api.sb/leaseline.app",
  "visitor": {
    "$id": "https://api.sb/leaseline.app/visitors/visitor_M5gHadysq9",
    "$type": "Visitor",
    "firstSeenAt": "2026-10-22T12:00:00Z"
  },
  "action": {
    "$id": "https://api.sb/leaseline.app/actions/act_br07HsG8MG",
    "operation": "Visitor.merge",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/leaseline.app/actions/act_br07HsG8MG"
  }
}
```