Request a demo

Mask sensitive data

Password, email, phone, hidden and number fields, and recognised card and bank fields, are masked by default, and long numbers are masked in any text field. Other text is recorded unless you mask it, so go through your pages once.

  1. Mask an element

    Its text and input values are recorded as asterisks, and images inside it become empty boxes.

    <section data-hl="mask">Account details</section>

  2. Block an element

    The whole element is replaced by an empty placeholder of the same size.

    <div data-hl="block">…</div>

  3. Mask by selector, or all text

    Pass selectors when you start the SDK, or mask all page text.

    heatlytics.init({ key, host, maskSelectors: ['.account'], maskAllText: false })

  4. Clean your URLs

    List query parameters whose values shouldn’t be recorded.

    heatlytics.init({ key, host, occludeQueryParams: ['token'] })

  5. Check a recording

    Open a session on those pages in Recordings and confirm what’s hidden. Heatmap snapshots follow the same masking.

Security and privacy

Stuck on a step?

Ask us. A demo is a conversation with the people building Heatlytics.

Request a demo