Masking and consent

Masked by default. Every <input>, <textarea>, and <select> is masked in the visitor's browser before anything is sent. We never receive passwords, card numbers, or typed messages. IP addresses are read for the country and discarded.

Mask text. Add data-rc-mask to any element and its text is replaced with asterisks:

<span data-rc-mask>Balance: $12,345.00</span>

Block entirely. Add data-rc-block and the element is recorded as an empty box of the same size. Use it for embedded chats, video, or anything third-party.

Consent gate. If you need opt-in before recording, add data-consent="true" to the script tag (or &consent=true on the URL form). Nothing is recorded until you call:

rc("consent");

Wire that to the accept button of your cookie banner. Visitors who decline are never recorded.

Stop recording. rc("stop") ends recording for the rest of the page view.