Privacy policy

[ 01 ]Two kinds of data, two roles

UserTapes is a session-replay service. That means two very different datasets pass through it, and our role differs for each:

• Your account data (email address, password, workspace and site settings, billing status). For this data we are the data controller.
• Recordings of your visitors (the "tapes" our snippet captures on your website). For this data you are the controller and we are your processor — we store and process it only to provide the service to you, never for our own purposes.

Because your visitors' recordings can contain personal data, you are responsible for disclosing your use of session replay in your own privacy policy and for having a lawful basis to record. A data processing agreement (DPA) is available on request.

[ 02 ]What the recorder captures — and what it never captures

The tracking snippet records DOM structure and interaction events: page navigations, mouse movement and clicks, scrolling, viewport size, typing activity, JavaScript errors, and failed network requests (method, status, and URL with query strings stripped — never request or response bodies, never headers).

By design, at the source, it does not capture:

• Input values. Everything typed into any field is masked in the visitor's browser before it is transmitted. We see that a field was typed in, never what was typed.
• Cookies or persistent identifiers. The snippet sets no cookies, writes nothing to localStorage, and does no fingerprinting. Two visits by the same person are separate, unlinkable tapes.
• IP addresses. Visitor IPs are used transiently to serve the request and are not stored with recordings.

A recording lasts for one browsing session and ends when the visitor leaves.

[ 03 ]Account data we collect

When you create an account we store your email address, a salted hash of your password (never the password itself), your workspace name, and your sites' names, domains, and settings. When paid plans launch, payment details will be handled by our payment provider and will not touch our servers.

[ 04 ]AI features

If you use the agent chat or connect an agent via MCP, the derived transcript of the tapes you query (event narration — clicks, navigations, errors; the same masked data described above) is sent to Anthropic to generate answers. Under Anthropic's commercial API terms this data is not used to train models. AI features only run when you invoke them; recordings are never sent to any AI provider in the background.

[ 05 ]Where data lives — subprocessors

• Hetzner Online GmbH (Germany/EU) — application hosting and database.
• Cloudflare, Inc. — recording storage (R2 object storage) and content delivery.
• Anthropic, PBC — AI processing, only when you use agent features (§04).

We will update this list before adding a subprocessor that handles recording data.

[ 06 ]Retention and deletion

Each site has a retention window you control. Tapes older than the window are permanently deleted automatically, storage included. You can also delete an individual tape, a whole site, or your entire account at any time from the dashboard — deletion removes the underlying recording data, not just the reference to it.

[ 07 ]Security

All data is transmitted over TLS. The snippet's token is write-only — it can submit recordings but can never read them. Read access requires your authenticated session or your secret MCP token, and every query is scoped to your own account. Recordings are stored in a private bucket with no public access.

[ 08 ]Your visitors' rights

If one of your visitors exercises a data-subject right (access, erasure, objection), the request belongs with you as the controller — but the tooling is there: tapes can be located by URL and time and deleted individually, and we will assist with any request we receive directly by referring it to you and supporting the deletion.

[ 09 ]Changes and contact

If this policy changes materially we will notify account owners by email before the change takes effect. Questions, DPA requests, or privacy concerns: privacy@usertapes.com.