Session recording
Session recording captures replays of flagged visitors' sessions so you can see exactly how they behaved. It is included on every paid plan; how long recordings are kept depends on your plan. You must disclose session recording in your privacy notice where required by law.
On this page
Numbers tell you a visit was suspicious. A replay tells you why. Session recording captures flagged visitors' sessions so you can watch the mouse movement, scroll pattern and interaction sequence that produced the score.
Disclose recording in your privacy notice
Where your jurisdiction requires it, you must tell visitors that their sessions may be recorded. This is your obligation as the site operator — add it to your privacy policy before enabling the feature.
What you get
- Session replay of flagged visitors.
- Coverage and diagnostic indicators, so you can tell when a session was only partially captured.
- Playback from the person detail panel, alongside that visitor's IP and session history and AI classification.
Turning it on
Enable it per website in Settings → Protection. The recording component is loaded on demand and only when the feature is enabled, so sites that do not use it carry none of its weight.
How long recordings are kept
Two retention windows apply, and both scale with your plan. Fraud evidence covers recordings tied to blocked clicks; replays covers ordinary clean sessions.
| Plan | Replays | Fraud evidence |
|---|---|---|
| Standard | 7 days | 30 days |
| Pro | 30 days | 60 days |
| Enterprise | 60 days | 90 days |
Included on every paid plan
Session recording is not a Pro-only feature — Standard has it too. What the higher plans buy is longer retention. See Plans and limits.
Frequently asked questions
Are all visitors recorded?
No — recording targets flagged visitors, not your entire audience. That keeps both the storage cost and the privacy footprint proportionate.
How long are recordings kept?
It depends on your plan and the kind of recording — from 7 days for clean replays on Standard up to 90 days for fraud evidence on Enterprise. See the table above. Expired recordings are removed when retention cleanup is enabled. If cleanup is suspended, records may remain until it resumes or deletion is processed; contact support to confirm the applicable settings. Custom plans may use different periods.