FAQs

How long are sessions captured?

Up to 4 hours of active recording time per session. Time when the tab is hidden does not count against this budget.

Do session replay events count toward my MTU?

No. Replay events are not counted toward your monthly tracked visitor total or visitor analytics counts. In practice this rarely changes the number anyway, because a visitor with a replay is almost always already counted through their regular events.

What data is captured in session replays?

User interactions, page navigation, mouse position, scroll position, click locations, and visual changes to the page. Form input values and visible page text are masked by default.

What data is not captured?

<script> contents are not recorded verbatim, and <canvas> content is not captured. See Privacy and masking for ways to control what is captured.

Is Session Replay HIPAA-compliant?

Session Replay is designed to support HIPAA compliance with configurable privacy controls and secure data handling. Ours Privacy offers a Business Associate Agreement (BAA) for healthcare organizations. As with any analytics tool, work with your compliance team to make sure your specific configuration (including consent management) meets your requirements. See the HHS guidance on HIPAA and online tracking.

Can I control what gets captured?

Yes. Three layers: global text masking with mask_all_text, CSS classes (op-session-replay-block / -ignore / -mask), and CSS-selector-based equivalents (block_selector / ignore_selector / mask_text_selector). See Privacy and masking.

Can I record only specific high-value sessions?

Yes. Set sampleRate: 0 and add the events you care about to alwaysRecordEvents. See Sampling and triggers.

Can I record only on certain pages or URLs?

Yes. Use recordOnPaths to limit recording to specific paths (for example, the home page only, then expand to your blog and landing pages), or excludePaths to keep recording off sensitive routes. Patterns support * wildcards and match the URL path. See Path scoping for the rules, or Recipes for copy-paste setups.

Can I get a summary of a session instead of watching it?

Yes, if AI Summaries are enabled on your account. Open a replay and select the AI Summary tab to read what happened, the moments that mattered, and what to change. Timestamps in the summary jump the player to that point. See AI summaries.

Does the AI summary read masked text?

No. The analysis reads the same recording you see in the player, so masked text arrives as asterisks and blocked elements are not captured at all. Your masking configuration controls what the analysis can read. See Privacy and masking.

How do I access captured sessions?

Open your Ours Privacy dashboard, click any event in your analytics or recent-events view, and the associated replay opens alongside the event timeline.

Is session replay data stored securely?

Yes. All replay data is encrypted in transit. Replays are removed automatically based on your account's retention period (default 90 days). See Data and retention.

Why doesn't replay run inside an iframe on my site?

Session Replay does not run inside cross-origin iframes (e.g., Shopify Web Pixel sandboxes, ad-tech containers). Install the SDK on the parent frame; same-origin frames are included automatically in the parent's recording.

---

Next steps

• Privacy and masking
• Configuration
• Sampling and triggers