Browser snippet

html
<script src="https://onetrial.dev/v1.js" data-key="YOUR_PUBLIC_KEY" async></script>
Async, no UI, 15 KB gzipped. It exposes window.OneTrial:
  • await OneTrial.getToken() -> visitorToken (JWT, 5-minute TTL; re-minted automatically when near expiry)
  • OneTrial.markSubmit() -> call from your submit handler so time-to-submit is captured
Send the token to your backend with the signup form. A missing or tampered token is scored as a signal, never rejected.
Content-Security-Policy: allow script-src https://onetrial.dev and connect-src https://onetrial.dev.