SLSessionLens

Privacy Policy

SessionLens helps website operators understand how visitors use their sites. This policy explains what we collect and how it's handled.

What we collect

• Session data on behalf of our customers: page views, clicks, scrolls, device/browser, and approximate location derived from IP (the raw IP is not stored).
• Recordings of page interactions (rrweb DOM snapshots). Password inputs are masked by default.
• Account data for our customers: name, email, and billing details (billing is handled by Stripe).

How recordings are masked

The tracker masks password fields by default and supports a data-sl-block attribute to exclude any element from recording. Customers are responsible for configuring masking appropriate to their site.

Consent

The tracker supports an optional consent mode (data-require-consent="1") that buffers all data until the visitor grants consent. Site operators are responsible for obtaining lawful consent where required.

Data subject rights

Customers can export their workspace data and delete their account at any time from Settings. Individual visitor data can be erased on request via the dashboard.

Retention

Usage counters are retained for billing history; recordings and session data follow the customer's configured retention. Account deletion removes all associated data.

Contact

Questions about this policy can be directed to your workspace administrator or our support channel.