What does Live view record, and how do I keep visitors' details private?

What it records

Page views, where visitors came from, how far they scroll, where they click, mouse positions on desktop, time on each page and load time, plus the IP address, approximate location, language, device, operating system and browser. A random id kept for one browser tab ties a visit together. There are no cookies.

What it never records

• What people type, or the label of the form fields they click.
• Personal details in page addresses (e-mail, phone, name, token and similar).
• Pages with password or card fields are never copied for Real-time.
• In page copies, form values are removed and e-mail addresses and long numbers (cards, accounts, phones) are blanked.

Blank out parts of a page

Add the attribute data-seomise-mask (or data-private) to any element whose text must never appear in SEOmise. It shows as ••• in page copies, and clicks on it keep no label.

Who is not tracked

Browsers that send Do Not Track or Global Privacy Control, visitors who did not allow statistics where the site uses the WP Consent API, and pages that set window.seomiseConsent = false. Signed-in WordPress users are not counted either.

Your settings

In Visitors → Live view → Settings (changing them needs the right to manage the project):

• Shorten IP addresses: keep 192.0.2.0 instead of 192.0.2.17. It is off until you switch it on, so Live view and Real-time keep the full address by default. The location is still looked up first.
• Switch off Clicks, Mouse heat maps, Scroll depth or Single-page navigation.
• Recognise returning visitors stays off unless you switch it on. It keeps a random id in the visitor's browser, which needs consent in the EU and UK.
• Keep visits for 7 to 365 days.
• Delete all recorded visits removes every visit kept for the site, for example after a data request.

In the EU and UK, mention Live view in your privacy policy and ask for consent where your cookie banner requires it.