Our WEB SDK is written with privacy-first in mind, therefore we do not record any potentially sensitive data by default. This means that inputs, IP addresses, on-page emails and long numbers are not recorded unless you enable it explicitly via record API.
Moreover, if you have more elements you want to mask or not record at all, you can always use our data attributes API.
You can also identify visitor's recordings with their information - if your website collects users' details (e.g., when they log in, etc.), these identifying characteristics can be parsed into Smartlook via our identify API.
Legal requirements about personal data collection may vary across countries in the world. It’s best to consult a local lawyer in your country if you are unsure about your legal obligations in this area.
Should I inform visitors that I record them?
If one of your visitors doesn’t want to be tracked by Smartlook on your website, you can send them the link to our opt-out page.
Is recording visitors legal?
Yes, tracking behavior and movement of your visitors using Smartlook is legal, just like using Google Analytics or other services for tracking visitors on your website.
From a legal point of view, it’s important if you record personal data of visitors using Smartlook. This is something you can set up with Smartlook. On most websites, the only place where visitors might fill in personal data are forms and Smartlook doesn’t record any form input by default, unless you enable it explicitly via record API.