Data Privacy FAQs

Can I download Heap’s SOC2 report?
Can I set up selective PII inclusion instead of redaction (an allowlist)?

At this time, Heap does not have the functionality for selective PII inclusion instead of redaction. For complete info on…

How to limit Heap cookie size

Before we get into best practices to limit cookie size, some important notes on how Heap generates cookies, and under…

How do I hide sensitive elements within Heap?

For complete info on how to hide sensitive elements from Heap, see the Sensitive Data sections of our installation guides:

How do I block the collection of IP or geolocation information?

The admin for your Heap account can toggle IP and Geolocation Autocapture on and off in the Heap app. Navigate…

How do I get Heap to ignore data from certain IP addresses?

You can add IP addresses that you want Heap to ignore data from by navigating to Account > Manage > Excluded…

What cookies does Heap set and what are they used for?

Heap’s tracking code uses first-party cookies set by your domain, and does not rely on third-party cookies for tracking. For…

When I delete a team member in Heap, what happens to the charts and definitions they created?

Here’s what happens to a team member’s data after they are deleted in Heap: Shared data: all charts, events, properties,…