Set up session recording with privacy rules
Sets up session recording on a site you own with masking, consent, retention and access rules decided before the first recording.
Task:
Set up a plan for recording user sessions on my site that decides the privacy rules first and the tool second.
Context:
My site is [site type] and users enter [kinds of information, such as names, payments or messages]. My visitors are in [countries or regions]. I want to learn [question the recordings should answer], and [number of people] people will watch them.
Rules:
- Start with what must never be recorded, such as password fields, payment fields and private messages, and how to mask or block them.
- Cover a consent or notice step, how long recordings are kept, who may watch them, and how a visitor can ask to have theirs removed.
- Limit recording to the pages and the share of visitors needed for my question.
- Give 5 questions to ask any vendor about storage location, masking, retention and access, without naming a vendor or stating what any vendor does.
- Privacy rules differ by country. Say that this is general information, not legal advice, and that a qualified professional should check it.
Result:
A numbered setup plan of at most 7 steps, a table of the data types to mask (field type, rule), at most 6 rows, and a short watch routine of at most 3 lines.