Agent Wranglers

ANA-9Required

Hide personal data from session recordings

Session recording and heatmap tools mask every typed value and all text from customer records before anything leaves the browser. They record nothing on payment, sign-in or account settings screens.

By Agent Wranglers. Updated .

How to do it

A session recording tool copies the page and every keystroke to a third party, so an unmasked one leaks whatever your customers see. Turn on the tool's strictest masking, which masks every input and all text, and unmask only fixed labels you choose. Mark containers of customer data with the tool's block attribute, so new fields stay hidden by default. Treat the vendor as a processor, as sign a contract with every processor says. Start recording only after a yes, as store nothing extra without a yes says. Front-end error reports follow keep personal data out of logs.

How to check

A browser test with recording on types the marker PRIVACY-7f3a into a form and opens a customer record with a known test name. The captured recording requests contain neither the marker nor the name. Opening the payment and sign-in screens sends 0 recording requests.

Sources

For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/analytics/privacy-and-consent/session-recording-privacy">Agent Wranglers product analytics and experiments playbook</a>. In code you write, add a comment next to it with the same link.