Hashed email, phone, card token, bank link, wallet — verified, revocable, audit-logged. Resolution is deterministic, never probabilistic. PII never leaves your stack.
SHA-256 of normalized values. We never see raw PII.
Card-on-file, bank consent, wallet signature, magic link.
One call revokes; consent expiry tracked per identifier.
Brand portal shows when one shopper appears across publishers.