Skip links
View Categories

Recordings privacy: masking, consent and encryption

1 min read

Pro feature. Session recording is part of Opti-Behavior Pro. Start the 6-month free trial to unlock it.

ProtectionHow
Masked inputsEverything typed in fields is replaced by stars (setting on by default)
ConsentIn Full Tracking, recording starts only after the visitor accepts
Self-hosted storageRecording files are stored on your server
EncryptionRecordings are stored encrypted; replaying them needs an active Pro licence
RetentionFiles expire after 90 days by default
AccessOnly users who can manage Opti-Behavior can watch them

Good practices #

  • Keep Mask all inputs on.
  • Mention recordings in your privacy policy.
  • Shorten retention if you do not need 90 days.
  • Add the cookie preferences shortcode so visitors can withdraw consent. See GDPR compliance guide.

What a masked recording looks like #

Fields appear with stars instead of text. You still see which field was focused, how long the visitor stayed and whether an error appeared – enough to fix the form, without reading any personal data.

  1. Visitor arrives: the page is tracked cookie-free, nothing is recorded yet.
  2. Visitor accepts the banner: recording starts from that moment.
  3. Visitor refuses: no recording.
  4. Visitor withdraws later with the cookie preferences shortcode: recording stops and identifiers are removed.

Expected result #

Recordings show behaviour, never what visitors typed.

FAQ #

Can I unmask a field? #

Masking is global to protect visitors; use Form Analytics to measure fields without values.

Are passwords ever recorded? #

No. Password fields are always masked.

Leave a comment

Explore
Drag