Session Replay Data Privacy

• Session Replay Privacy and Security Settings

  Overview Heap’s session replay privacy and security settings are highly customizable to make sure you don’t capture a...

• Session Replay InfoSec Checklist

    After you've enabled session replay, go through the following list to make sure all your Heap settings are configur...

• What privacy settings does Session replay inherit from Heap?

  The general security settings you have chosen for Heap (found by going to Security Settings) will be the first settin...

• How do I prevent session replay from capturing certain data, such as passwords and credit card numbers?

      Heap session replay does not capture any input or text fields regardless of your privacy settings configurations....

• How do I block bot behavior from being captured in session replay?

      Many of our customers run Heap on public-facing, content-rich sites, and robots can generate unwanted sessions. H...

• I accidentally captured PII in a session replay. What do I do?

  The impacted sessions and associated PII can be manually purged by Heap.  Visit our Get support page and contact us ...

• Why can’t I see what users are typing into forms?

  This is a privacy setting that is enabled by default to prevent you from accidentally collecting PII (Personal Identi...

• Are you recording my user’s screens?

       

• Do I need end user consent for session replay?

      Your session replay tool is covered by your cookie disclosure and consent policy for analytics. If you have not d...

• What does session replay capture?

      What we capture Session replay captures a copy of your website, as well as the following user/behavioral events: ...

• How long are session replays stored?

  Session replays are stored for a period of 30 days by default. To evaluate custom retention options, reach out to Sup...