Contentsquare
redacts emails, tokens and card numbers in the browser, before anything is sent.
the strongest technical privacy posture of the mainstream commercial tools, and its free tier swallows this page's entire benchmark.
most masking in this category is a promise about what a vendor's servers do with data that has already been transmitted. contentsquare's automatic personal data redaction runs in the tracking tag: emails, jwts, oauth tokens and credit card numbers are detected and removed in the browser, before any request leaves the client. that is a materially different guarantee — the unmasked value never exists on someone else's infrastructure.
the defaults underneath are also right. the tag does not capture the values of pre-filled input or textarea fields and does not collect what the user types, with all-pages masking applied by default on every project. eu customer data is stored in eu data centres, enterprise plans add configurable residency for sovereignty requirements, and the company is iso 27701 certified as both controller and processor and acts as its own gdpr article 27 representative.
the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.
- category
- session replay tools
- pricing
- free to 200k sessions/mo
- website
- contentsquare.com
the strongest technical privacy posture of the mainstream commercial tools, and its free tier swallows this page's entire benchmark.
we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.
more session replay tools
Microsoft Clarity
we checked thisfreeinput masking you are not allowed to switch off, free, with no traffic limit — and a business model worth understanding.
PostHog
we checked this$272.50/mo at 100k sessionsmasks all inputs by default, hosts in the eu on every plan including free, and you can self-host the mit core.