verifier.org

Microsoft Clarity

input masking you are not allowed to switch off, free, with no traffic limit — and a business model worth understanding.

free#teams-that-want-the-safe#cannot-rely-on-developer

the only tool here where a careless install is still a safe install, because the masking is not yours to disable.

clarity's faq is unusually blunt: 'content in the input boxes is masked in all modes and can't be customized'. no configuration, no flag, no enterprise override. everything else in this category is a default you can weaken; this is a constraint. for an organisation where the snippet will be installed by whoever picks up the ticket, that distinction is worth more than any feature.

the rest holds up. there is a native consent api, third-party cmp support, and microsoft requires explicit consent for eea, uk and swiss visitors — enforced by degrading the product rather than by trust. without a consent signal, session continuity breaks and each page view becomes a new session, so replay stops working properly rather than quietly continuing. eu customers contract with microsoft ireland, with standard contractual clauses covering transfers. the client-side capture sdk is open source under mit; the backend is not.

the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.

pricing
free
our verdict

the only tool here where a careless install is still a safe install, because the masking is not yours to disable.

we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.

more session replay tools

Contentsquare

we checked thisfree to 200k sessions/mo

redacts emails, tokens and card numbers in the browser, before anything is sent.

#teams-that-want-masking-

PostHog

we checked this$272.50/mo at 100k sessions

masks all inputs by default, hosts in the eu on every plan including free, and you can self-host the mit core.

#engineering-teams-that-w#eu-hosting#the-option-to-run-it-the

Quantum Metric

we checked thisquoted

pii is encrypted at capture with a key only you hold — quantum metric cannot decrypt its own customers' data.

#regulated-enterprises-th

Datadog RUM

we checked this~$2.50 per 1,000 replayed sessions

`mask` is the default privacy level, and password, email, tel and card fields stay masked whatever you set.

#teams-already-running-da#logs#infrastructure