Privacy & Security Controls

Configure PII masking, control telemetry redaction, and review site owner privacy responsibilities.

Last updated:2026-07-11

TellBack prioritizes privacy, providing tools to prevent the accidental capture of Personally Identifiable Information (PII) and ensure data security.

---

Masking & Telemetry Redaction Options

Manage privacy thresholds through Settings > Sites > Replay Config using three masking levels:

• Strict Mode: Overwrites all webpage text to ••• symbols on capture, ensuring zero document content is recorded.
• Balanced Mode: Selectively redacts common PII sequences. Regex match patterns find and replace email addresses, payment cards, phone numbers, JWT tokens, hex secret tokens, and base64 strings across all text nodes and visual alt/placeholder fields.
• Relaxed Mode: Captures layout text intact. Standard input elements security remains active.

---

Form Field & Input Protections

To protect sensitive visitor details, TellBack enforces form safety:

• Default Input Masking: Text typed into standard interactive fields (input, textarea, select) is masked automatically.
• Sensitive Fields Redaction: Passwords and payment-related fields are overwritten to solid #000 blocks in viewport screenshots.

---

DOM-Level Controls

Exclude or mask specific sections of your application by inserting HTML attributes:

• data-tellback-ignore: Completely removes the matching node and its children from screenshots and session logs.
• data-tellback-mask: Overwrites text content with solid #ccc shapes, preserving layout formatting.

---

Data Security & Storage

All feedback cards, logs, and screenshots are transmitted securely over HTTPS and stored inside Firestore databases. Data is access-controlled using project rules, ensuring logs are readable only by authorized Owners and Editors.

---