Our WEB SDK is written with privacy-first in mind, therefore we do not record any potentially sensitive data by default. This means that inputs, IP addresses, on-page emails and long numbers are not recorded unless you enable it explicitly via record API.

Moreover, if you have more elements you want to mask or not record at all, you can always use our data attributes API.

You can also identify visitor's recordings with their information - if your website collects users' details (e.g., when they log in, etc.), these identifying characteristics can be parsed into Smartlook via our identify API.

For example - if you enable recording of forms inputs through Smartlook, you are most likely collecting personal data of your visitors. Collecting of personal data is subject to local laws in your country. In most countries in the European Union, you are required to inform visitors of your website about the fact you collect their personal data through a 3rd party software. We recommend adding the following statement to your terms & conditions or privacy policy: “Your personal data might be collected by us or 3rd parties, such as Smartlook.com, s.r.o., VAT ID No.: 095 08 830”.

Legal requirements about personal data collection may vary across countries in the world. It’s best to consult a local lawyer in your country if you are unsure about your legal obligations in this area.

Should I inform visitors that I record them?

It depends if you record personal data of your visitors using Smartlook and also on local laws in your country. If you don’t record any personal data, you don’t need to inform your visitors about the recording. If you do record personal data of your visitors through Smartlook, you are most likely required to inform them about this. The best way is to include it in your privacy policy that is easily accessible on your website. 

If one of your visitors doesn’t want to be tracked by Smartlook on your website, you can send them the link to our opt-out page.

Yes, tracking behavior and movement of your visitors using Smartlook is legal, just like using Google Analytics or other services for tracking visitors on your website.

From a legal point of view, it’s important if you record personal data of visitors using Smartlook. This is something you can set up with Smartlook. On most websites, the only place where visitors might fill in personal data are forms and Smartlook doesn’t record any form input by default, unless you enable it explicitly via record API.

Did this answer your question?