Tracking and privacy

Sensitive field handling

Sensitive field handling is about deciding which inputs, values, and on-page content should never be visible in session replay or analytics outputs.

Tracking and privacy

Identify the fields that need protection

Start with forms where visitors may type sensitive information.

Step by step

  • Review contact forms, registration forms, payments, booking forms, and healthcare-related forms.
  • List fields that may contain names, phone numbers, addresses, identity numbers, or medical details.
  • Mark those fields for masking or exclusion before promoting the project to wider internal use.
Tracking and privacy

Apply the right masking approach

Not every field needs the same treatment, so choose the lowest-risk option that still preserves useful analytics.

Sensitive field masking example placeholder

Step by step

  • Mask text inputs where users can enter open-ended information.
  • Exclude highly sensitive forms if masking alone is not enough.
  • Keep only the structural behavior you need, such as whether the field was focused or whether the form was submitted.
Tracking and privacy

Retest after website changes

Form structures can change when the site is redesigned, a plugin is updated, or a new checkout flow is added.

Step by step

  • Revisit masked pages after major releases.
  • Confirm new fields are covered by the same privacy rules.
  • Do a quick replay review after updates before considering the job finished.