Privacy & security by design
Session data is sensitive. VisitorLab masks what visitors type, keeps no IP addresses, stores data in the EU and deletes it on schedule.
Masking
Form input values are masked in the visitor's browser before anything is uploaded. Hide any other element, such as an account number or an address, with one HTML attribute.
No IP addresses
Visitor IP addresses are not stored with session data. Country is derived from the browser's time zone instead.
EU storage & retention
Session data is stored in the EU (Nuremberg, Germany) and deleted automatically when it is older than your plan's retention period.
How masking works
The recorder masks form input values in the browser, so what visitors type never reaches our servers. To hide anything else, add the data-clarity-mask="true" attribute to the element; masked content does not appear in replays.
Data residency & retention
Session data is stored in Nuremberg, Germany. It is kept for your plan's retention period (30 to 365 days) and older sessions are deleted automatically every few hours.
Need a security questionnaire answered?
Our team answers data processing and vendor security questions directly.