Session replay on sensitive pages

Why it matters

Session replay tools record what users type and see, including on login and checkout pages.

How to fix it

Remove session replay from sensitive pages or mask all inputs, and disclose it in your privacy policy.

How we test it

Passive — runs in the free check, looks only at what a browser can see.