What VisitorLayer never captures
Passwords, card numbers, and other sensitive fields.
Unverified2 min
VisitorLayer blocks sensitive fields in the visitor's browser, before anything is sent, and again when an event arrives. You cannot turn these fields on, and they can never reach a webhook or your CRM.
- Password fields and file uploads.
- Fields the browser marks for card details, passwords, or one-time codes.
- Fields named for passwords, PINs, card numbers, security codes, bank account numbers, tokens, or secrets.
- Fields named for government IDs, such as social security, tax file, or passport numbers.
- Fields with no name, because they cannot be shown to be safe.
You choose every other field a form captures when you track it, and you can stop capturing a field at any time.
VisitorLayer never stores visitors' raw IP addresses in analytics events, and never builds browser fingerprints.