Masking and replays

Quomerce keeps personal data out, mostly with no work from you.

Never recorded

• What visitors type into inputs, text areas and selects, on any page.
• Request and response bodies and headers.
• IP addresses. Only the country is kept.

Masked automatically

• All text on checkout, thank-you and account pages, in replays. Make sure those pages get the right page type.
• Email addresses and phone numbers in URLs, error messages, click text, search terms and custom event props.
• Query parameters other than the ones you keep. See URLs, requests and cookies.

Hide more

Use two HTML attributes on any page:

<!-- The text is replaced in the replay; the layout stays. -->
<span data-qm-mask>Jan Kowalski</span>

<!-- Not recorded at all; the replay shows an empty box of the same size. -->
<div data-qm-block>…</div>

Use data-qm-mask for personal data outside checkout, such as a customer name in the header. Use data-qm-block for things that should not be seen at all, such as an embedded chat. A canvas that can show personal data, such as a signature pad, should be marked too.

Can’t change the HTML? Add CSS selectors in Analytics settings → Session replay: Mask text in works like data-qm-mask, Leave out entirely like data-qm-block.

When replays are recorded

A session is recorded only when:

• Record replays is on for the website;
• the visitor allowed replays (or consent is Not required), see Consent;
• the browser is not automated or headless;
• the session is at least 3 seconds old.

A recording lasts up to 6 hours, and stops after 30 minutes with no activity. Replays are kept for 2 to 30 days. See Analytics settings.