Skip to content
Centriu
Centriu Flow

On-Site Popup and Banner CRO Automation: The Right Prompt, at the Right Moment, Not Every Moment

On-site popup and banner automation, through Centriu Flow, lets a team configure a popup, full-screen takeover, slide-in, or top/bottom banner once, and have it appear automatically on real visitor behavior — after a time delay, once a visitor scrolls past a set percentage of the page, the moment a cursor moves to leave the browser window, after a minimum number of page views in the session, or when the URL matches a pattern — targeted by device and by URL, and capped so the same visitor is not shown the same widget on every single visit. Every impression, click, conversion and dismissal is tracked automatically through a single atomic counter, so two visitors triggering the same widget at the same instant never silently lose one of the events.
Five real behavioral triggers
Atomic, race-safe event tracking
Small business owner checking a phone
The right prompt, at the right moment.

Why a popup that ignores behavior trains visitors to close it on sight

A popup that fires the instant a page loads, regardless of what the visitor is actually doing, teaches people to close it reflexively before reading it — the exact opposite of the outcome it was built for. The difference between an interruption that converts and one that gets dismissed on reflex usually comes down to timing: whether it appears after genuine engagement (real scroll depth, a real second page view) or the moment the visitor has shown zero signal of interest yet.

How the underlying problem shows up before you fix it

A popup fires on page load for every visitor, including the ones who arrived seconds ago and have not read a single line yet.

The same visitor sees the identical offer on every single page load, because nothing tracks whether they already saw and dismissed it.

A team wants an exit-intent offer specifically for visitors about to leave without converting, and today that requires a developer to wire up a mouse-tracking script.

A promotional banner needs to show only on mobile, or only on a specific set of landing pages, and the current setup shows it everywhere or nowhere.

Nobody can say how many people actually saw a given popup versus how many closed it immediately, because impressions and dismissals are not tracked separately.

Why behavior-triggered widgets are more than a delayed popup

A popup on a fixed timer is the easy version — the harder, more useful version reacts to what a specific visitor is actually doing: how far they have scrolled, how many pages they have viewed this session, or whether their cursor just moved toward the browser's close button. Each of those signals needs its own real detection logic running in the visitor's browser, not a single generic timer standing in for all of them. And once a widget can fire on real behavior, it also needs real frequency control — without it, a visitor who already dismissed an offer once would see the exact same interruption on every subsequent page view, which erodes trust faster than showing nothing at all.

How Centriu Flow serves and tracks the widget

A team configures a widget in one of six formats — popup, full-screen takeover, slide-in, top banner, bottom banner, or a persistent bar — along with a trigger: a fixed time delay (three seconds by default), a minimum page-view count in the session (two by default), a scroll-depth percentage (50% by default), exit intent (detected the instant the cursor crosses toward the top of the browser window, the real signal a visitor is about to leave), or a specific URL match. Targeting narrows who ever sees it: by device (mobile or desktop, detected by real screen width) and by URL include/exclude patterns.

Once a widget qualifies to fire for a given visitor, a frequency cap decides whether it actually shows: once per browser session, once per calendar day (a real 24-hour check, not just "once per session" renamed), or every time the trigger condition is met. Every meaningful moment — the widget being shown, a click inside it, a specific conversion action, or the visitor dismissing it — is recorded through a single atomic counter increment, so two visitors triggering the same widget in the same instant are both counted correctly rather than one silently overwriting the other. The account a widget belongs to is always resolved server-side from a tracking key embedded in the site's script — a request can never claim to belong to a different account than the one that key actually maps to.

What is actually built today

Six widget formats: popup, full-screen, slide-in, top banner, bottom banner, and a persistent bar.

Five real behavioral triggers: time delay, minimum page-view count, scroll-depth percentage, exit intent (real cursor-position detection), and URL match.

Device targeting (mobile/desktop by real screen width) and URL include/exclude pattern targeting.

Three frequency-cap modes: once per session, once per calendar day (a genuine time-based check), and every time the trigger fires.

Atomic, race-condition-safe tracking of impressions, clicks, conversions and dismissals — a documented fix over an earlier version that could silently drop one of two simultaneous events.

Two independent layers of rate limiting on the public tracking endpoint: by visitor IP and, separately, by the account being tracked.

Server-side account resolution from a public tracking key — never trusted from the request body.

An exit-intent offer that only shows once (illustrative scenario, not a real client)

A team configures a slide-in offer set to trigger on exit intent, targeted to desktop visitors on the pricing page only, capped at once per day. A visitor browses the pricing page, and the moment their cursor moves toward the browser's tab bar — the real signal they are about to leave — the slide-in appears with a discount offer. They dismiss it. The next time they visit the same page later that same day, nothing appears, because the daily cap already recorded a dismissal; the following day, the offer is eligible to show again if they trigger the same exit-intent behavior.

What changes operationally

A popup or banner starts appearing when a visitor's actual behavior suggests the moment is right, rather than on a schedule that ignores what they are doing. Frequency capping means the same visitor is not shown an identical interruption on every page load, and because every event type is tracked separately and atomically, a team can tell the difference between "widely seen but rarely clicked" and "rarely triggered at all" instead of guessing from a single combined number.

When this is not the right fit

A team that needs a widget to appear based on a visitor's identity or CRM history (not just their on-page behavior in the current session) will find targeting here is scoped to device and URL, not contact-level personalization. A team expecting real-time visual A/B testing of widget copy inside this same tool should look at Flow's dedicated A/B testing mechanism, which is a separate, statistically-driven feature for testing page-block variants, not widget copy specifically.

A one-size-fits-all popup vs. a widget that reacts to real behavior

A popup on a flat timer treats every visitor identically regardless of what they are actually doing on the page, which is exactly what trains people to close it without reading. Centriu Flow's widgets react to five different kinds of real, detected behavior — scroll depth, exit intent, page-view count, elapsed time, or URL — and respect a frequency cap so the same visitor is not shown the same interruption over and over, keeping the moment relevant rather than routine.

Related systems

Main system: Centriu Flow.

What it does NOT do

  • Does not target by contact identity or CRM history — targeting is scoped to the current session's device type and the URL being viewed.
  • Does not show the same widget to a visitor more often than the configured frequency cap allows, including a genuine once-per-calendar-day option, not just a renamed session cap.
  • Does not trust a request's claimed account — the account is always resolved server-side from the site's own tracking key.
  • Does not risk losing a tracked event under simultaneous traffic — impression/click/conversion/dismissal counts are incremented through a single atomic database operation, not a read-then-write pattern that can drop one of two concurrent events.
  • Does not provide statistical A/B testing of widget copy inside this same tool — that is a separate, dedicated Flow mechanism for testing page-block variants.
  • Does not build the widget through a visual drag-and-drop canvas — configuration is form-based, matching the same "no canvas" convention as the rest of Flow's automation builder.

Security and governance

The public widget-serving and event-tracking endpoints resolve the owning account only from a server-verified tracking key, never from a client-submitted account identifier, and apply two independent layers of rate limiting (by visitor IP and by account). Widget configuration is restricted to the organization's own authenticated workspace. Any personal data collected through a widget's own form fields follows Brazil's LGPD (Law No. 13,709/2018). Full detail on access control lives at /governanca and /iso.

Pricing and contracting

Available by monthly subscription, with tiered plans. Values and terms come from the official pricing table at /precos (Centriu's central source — never restated here).

Frequently asked questions

What triggers can a widget use?

Five real behavioral triggers: a time delay, a minimum page-view count, a scroll-depth percentage, exit intent (real cursor-position detection), or a URL match.

How does frequency capping work?

Three modes: once per browser session, once per calendar day (a genuine 24-hour check), or every time the trigger condition is met.

Can the same visitor see a widget twice in one day if the cap is once-per-day?

No — once a widget is shown and the cap is once-per-day, it will not show again to that visitor until the following day.

What widget formats are available?

Six: popup, full-screen takeover, slide-in, top banner, bottom banner, and a persistent bar.

Is there a risk of losing a tracked event under heavy traffic?

No — impression, click, conversion and dismissal counts are incremented through a single atomic database operation, specifically to prevent two simultaneous events from overwriting each other.

What does Centriu Flow cost?

It is sold with tiered plans, starting at a published entry price — exact current values are on the central pricing page.

See how Centriu Flow triggers popups and banners on real visitor behavior

Reach our commercial team directly, or leave your details below — we'll follow up with guidance for your case.

Sources

  1. Centriu Flow — public product page — Centriu, 2026-07-20 · link(primária)
  2. Centriu Flow — public factsheet (API, JSON) — Centriu, 2026-07-21 · link
  3. Law No. 13,709/2018 — Brazil’s General Data Protection Law (LGPD) — Presidência da República (Brazil), 2018-08-14 · link

Last material update on .

By · AI-assisted production, with human review

We value your privacy

We use cookies to improve your experience, analyze site usage and support our marketing. You can accept all cookies or manage your preferences. To learn more, see our Cookie Policy.