verifier.org

Contentsquare

redacts emails, tokens and card numbers in the browser, before anything is sent.

free to 200k sessions/mo#teams-that-want-masking-

the strongest technical privacy posture of the mainstream commercial tools, and its free tier swallows this page's entire benchmark.

most masking in this category is a promise about what a vendor's servers do with data that has already been transmitted. contentsquare's automatic personal data redaction runs in the tracking tag: emails, jwts, oauth tokens and credit card numbers are detected and removed in the browser, before any request leaves the client. that is a materially different guarantee — the unmasked value never exists on someone else's infrastructure.

the defaults underneath are also right. the tag does not capture the values of pre-filled input or textarea fields and does not collect what the user types, with all-pages masking applied by default on every project. eu customer data is stored in eu data centres, enterprise plans add configurable residency for sovereignty requirements, and the company is iso 27701 certified as both controller and processor and acts as its own gdpr article 27 representative.

the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.

pricing
free to 200k sessions/mo
our verdict

the strongest technical privacy posture of the mainstream commercial tools, and its free tier swallows this page's entire benchmark.

we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.

more session replay tools

Matomo Session Recording

replay inside a self-hostable analytics suite, no third-party data sharing

#self-hosted#privacy

Wingify Analytics

replay and heatmaps from the vwo team, now sold under the wingify brand

#ab-testing#heatmaps

UXCam

session replay for native mobile apps rather than the web

#mobile#native

Microsoft Clarity

we checked thisfree

input masking you are not allowed to switch off, free, with no traffic limit — and a business model worth understanding.

#teams-that-want-the-safe#cannot-rely-on-developer