Skip to Content
FeaturesPrivacy / PII

Privacy / PII Available (v1)

This is what turns an analytics tool into one you can trust: sensitive inputs are masked before they ever leave the browser, IPs are shortened server-side, and nothing is captured before consent.

Where in the dashboard

Settings → Privacy — per site, with five tabs: Data collection, Masking, Cookie banner, Compliance, and Data-subject requests. Roles from editor up can change the settings, and a privacy wizard walks you through the initial setup.

Core concept

Protection happens client-side, before anything is sent — not on arrival:

  • Field values are never read. For forms, Visz captures only the label, field order, and timing (focus, dwell, abandonment) — never the entered value. Password, email, phone, card, and IBAN fields are additionally treated as sensitive.
  • PII is masked. In captured text (e.g. element text, error messages, event properties), email addresses, credit cards (Luhn-checked), phone numbers, IBANs, tokens (Bearer/JWT), and UUIDs are replaced client-side with ■■■■.
  • URLs stay lean. Only utm_ parameters are kept in page URLs; every other query value is dropped as potential PII.
  • identify() never sends raw PII — only a client-side, non-reversible hash (pseudonymization).
  • Consent-gated, and “Do Not Track” wins. Before consent there are zero events, recordings, or fingerprints; a set DNT signal stops tracking entirely (unless explicitly overridden).

Masking modes & IP anonymization

In the Masking tab you choose, per site, how much Visz gets to see at all: Mask everything (recommended — also covers checkout/payment fields), Mask input fields only, or Masking off. Sensitive fields stay masked in every mode except “off”, and a CSS selector lets you mask additional elements on purpose.

Server-side, the visitor IP is stored anonymized only: for IPv4 the last octet is zeroed (/24), for IPv6 it is truncated to /48. The GeoIP lookup runs offline on the full IP and before it is shortened — the full address is never persisted, and geo resolution stays at country + region (no city). Hosting is exclusively in the EU (Germany).

Last updated:

Last updated on
Team & SharingBot Filtering