Last updated November 2020
What should you know when a website or native mobile application uses Fullstory?
Meet Fullstory
Thousands of companies use Fullstory every day to see their websites and native mobile applications through their users’ eyes. Fullstory ’s session replay and analytics capabilities help web teams troubleshoot bugs, support their customers, and build better experiences. To learn more about Fullstory, visit our home page.
What information is recorded?
A website or app using Fullstory may be recording any of the following information:
Usage patterns:
Clicks
Mouse movements
Scrolling
Typing (except sensitive information*)
Usage patterns illuminate areas of a website or app that are confusing or underused, allowing web designers to improve their customer experience and build better features.
*Passwords, payment information, and Social Security numbers are excluded by default from being recorded. Fullstory does not allow its customers to record these sensitive data under any circumstances according to its Acceptable Use Policy.
Tech specs:
Browser
Device type
Operating system
Resolution
Script errors
IP address**
Bugs and errors are often particular to a specific web browser or device type. This information helps developers build and ship fixes faster.
**Fullstory provides an option to actively discard IP data. Whether to use this feature is up to the discretion of individual data controllers according to their interpretation of the GDPR and its application to their business.
Navigation
Pages visited
Referrers
URL parameters
Session duration
Knowing the most popular pages and sources of referral traffic help product managers and marketers improve the quality of content and advertising.
Personal information
Data controllers may only send this data with consent or legal basis.
Display name
Email address
App-specific data***
Account information helps web teams understand your unique experience and troubleshoot any problems you may be having.
***Websites using Fullstory choose how much, if any, of their own app’s unique customer data to store in Fullstory.
Does Fullstory use this information for its own purposes?
Absolutely not! Fullstory hosts data as part of the service it provides to its customers, but doesn’t make any claim to said data, similar to the way a bank provides safe deposit boxes. Websites using Fullstory have sole ownership of and access to recorded data.
What rights do I have regarding my information?
Under the GDPR, you have strong rights related to the use of your data, including things like...
knowing what information is being recorded and how it will be used
accessing and viewing the information
having your information erased
correcting the information about you
getting a copy of the information for yourself
restricting specific uses or stopping altogether the usage of your information
To invoke these rights, you'll need to contact the website recording the data (“data controller”) and passing it into Fullstory. As mentioned earlier, Fullstory is like a bank offering safe deposit boxes: just as a bank wouldn't access to remove the contents of a customer's safe deposit box, Fullstory wouldn't access or delete data in one of its customers’ accounts which could contain your data.
However, Fullstory provides a suite of tools to help web teams honor the requests of EU citizens under the GDPR, so they should be well-positioned to fulfill your requests.