UserReplay does not allow the capture of personal data within its own environment. Personal data is redacted at the first point of contact, in the website visitor’s browser.

In addition to automated monitoring we regularly audit our implementations manually to ensure we are not collecting personal data.

It is essential that no personal data such as passwords, contact details or payment details are ever sent to UserReplay.

To facilitate this, UserReplay has implemented a whitelist approach to scrubbing (Scrubbing is a term used by UserReplay to describe either completely excluding content from capture or masking textual content by obfuscating the characters).

This approach means we scrub pages using a masking technique on all user input elements by default.

As an extra precaution, the JavaScript tag has added intelligence to prevent it from ever capturing a valid credit card number, utilizing the Luhn algorithm to identify potential credit card numbers and scrub them as an additional check prior to sending the anonymized data to the UserReplay environment.