For Admin users only
Please note that only users with Admin access can change Data Masking settings.
Introduction
This article provides information about personal data masking in Contentsquare and how to manage it, in order to protect your user’s personal data.
Personal data refers to any information that identifies, relates to, or can directly, or indirectly, be linked to an individual. GDPR and other privacy laws around the globe regulate the collection and storage of personal data.
Our Data Masking controls help you to manage what your visitors' personal data looks like inside the Contentsquare platform. This page will help you choose a global masking level for your entire website, then create exceptions to override it on specific pages.
How to access Data masking settings
Masking settings are configured per project.
You must have Admin access to edit ‘Data masking’ settings.
- Click on your profile icon.
- Click 'Projects and users'.
- Select ‘Data Masking’.
Website-level masking
Automatic Personal Data Redaction: What's always protected?
Regardless of your settings, the Contentsquare tag automatically redacts
form field values, email addresses, credit card-like numbers, phone-like
strings, numbers greater than or equal to (≥) 9 digits, and JWT tokens.
This is called Automatic Personal Data Redaction. It
is
always active and
cannot be turned off.
Website-level masking sets the default masking level for your entire website.
There are three modes:
- Full masking : All text, numbers, and media are masked (this is the default setup)
- Partial masking : Text and numbers are masked. Media is visible.
- No masking : All text, numbers, and media are visible. Form fields and sensitive numbers remain masked (See Automatic Personal Data Redaction above).
To set website masking:
- Under ‘Website-level masking’, select ‘Full masking’, ‘Partial masking’, or ‘No masking’.
- Click ‘Save’.
⚠ Important
Switching from Full masking to Partial masking or No masking means more
of your users’ content will be visible in the Contentsquare platform.
Make sure you've reviewed what data your pages display before reducing
your masking level.
Page-level exceptions
Page-level exceptions override your global masking setting on specific pages. Use them when you need a different masking level on certain URLs — for example, to unmask pages that don't contain personal data, or to add extra masking on pages that do.
Step 1 - Choose what to mask or unmask on exception pages
Before creating your URL rules, define what type of content should be masked or unmasked on those pages. These settings apply to all your exceptions, not to individual rules.
Under ‘Page-level exceptions’, tick the content types you want to apply to your exceptions:
- Text
- Numbers
- Media
What does "media" include?
Note that checking media will include these html tags:
["picture", "img", "video", "audio"]
Step 2 - Create URL rules
You can create up to 20 rules per project.
URL rules define which pages your exceptions apply to.
- In the next available rule field ;
- Select a condition from the dropdown in the first field (for example, "URL contains" or "URL starts with", or “Regex”).
- Enter a value in the second field.
- Click the ellipsis menu (3 vertical dots) for more applicable options for this rule:
- Ignore query string
- Ignore URI fragments
- Ignore case sensitivity
- Enter a URL in the ‘URL tester’ field and click ‘Test’ to validate your rule.
- Click ‘Save’.
To delete a rule, simply click on the 🗑️ (trash) icon and click ‘Save’.
Refine your set up with Element masking / unmasking
Having your pages’ UI content masked by default can make it difficult to analyze your website’s interface during a session replay. Therefore, you are able to control which part of the user interface is collected via our masking and unmasking methods, allowing you to only mask what’s necessary.
Using the Contentsquare Tag Configurator
Pro & Enterprise plans only
Selectively mask and unmask targeted elements across your site, by using our snippet templates directly from the Contentsquare Console. This helps you improve visibility of the user experience when analyzing session replays, while still maintaining masking throughout your pages as necessary.
Element masking gives you control over individual elements on a page using CSS selectors.
It is configured through the Contentsquare Tag Configurator (CSTC).
Follow the instructions in the relevant CSTC section:
- CSTC Template: Element Masking — mask specific elements using CSS selectors.
- CSTC Template: Element Unmasking — unmask specific elements within a fully masked page.
In your HTML code
Available on Free, Growth, Pro and Enterprise plans
Beyond Data Masking configuration options, Contentsquare provides javascript APIs and HTML attributes to mask or strip Personal Data from specific channels, on top of Full or Partial Masking.
You can refer to our Technical Implementation Documentation for details.
FAQs
Does Page Masking retroactively mask pages?
No, changes are not applied retroactively.
Does changing my Data Masking settings apply to historical data?
No. Changes apply only to data collected after you save. They are not applied retroactively.
Can I use different content types (Text, Numbers, Media) for different rules?
No. The Text, Numbers, and Media checkboxes apply to all your page-level exceptions, not to individual rules.