Privacy Controls

UserHero gives you granular control over what data is collected. Configure settings at both project and widget levels.

Privacy Hierarchy

Project Settings (ceiling)
    └── Widget Settings (can only be more restrictive)

Project settings set the maximum allowed collection. Widget settings can be more restrictive but never exceed project settings.

Project-Level Settings

Configure in Project Settings → Privacy:

Page URL Collection

Setting	Collected Data
Off	Nothing
Path only	`/dashboard/settings`
Full URL	`https://app.example.com/dashboard/settings?tab=profile`

Recommendation: "Path only" for most cases—provides context without query parameters.

Referrer

Setting	Description
On	Previous page URL stored
Off	Not collected

Browser & OS

Setting	Description
On	Browser name, version, OS
Off	Not collected

Device & Viewport

Setting	Description
On	Device type, screen size
Off	Not collected

Timezone & Locale

Setting	Description
On	User's timezone, language
Off	Not collected

Location

Setting	Description
Off	Not collected
Country only	Country code derived from IP

Custom Metadata

Setting	Description
On	Allow `setMetadata()` calls
Off	Metadata ignored

Each widget can further restrict collection:

Screenshot Capture

Setting	Description
Off	No screenshots
Optional	User can choose to capture
Required	Must capture before submit

Email Collection

Setting	Description
Off	Email field hidden
Optional	Field shown, not required
Required	Must provide email

File Attachments

Setting	Description
Off	No attachments
Optional	Can attach files

Example Configuration

Privacy-First (Minimal Collection)

Project Settings:
├── Page URL: Path only
├── Referrer: Off
├── Browser & OS: Off
├── Device & Viewport: Off
├── Timezone & Locale: Off
├── Location: Off
└── Custom Metadata: Off

Widget Settings:
├── Screenshot: Off
├── Email: Off
└── Attachments: Off

Standard Collection

Project Settings:
├── Page URL: Path only
├── Referrer: On
├── Browser & OS: On
├── Device & Viewport: On
├── Timezone & Locale: On
├── Location: Country only
└── Custom Metadata: On

Widget Settings:
├── Screenshot: Optional
├── Email: Optional
└── Attachments: Optional

Full Context (Bug Reporting)

Project Settings:
├── Page URL: Full URL
├── Referrer: On
├── Browser & OS: On
├── Device & Viewport: On
├── Timezone & Locale: On
├── Location: Country only
└── Custom Metadata: On

Widget Settings:
├── Screenshot: Required
├── Email: Optional
└── Attachments: Optional

User-Facing Privacy Notice

You can add a privacy notice to your widget:

Go to widget Settings → Content
Enable "Show privacy notice"
Customize the text or link to your privacy policy

Example notice:

Your feedback helps us improve. We collect minimal 
context data. See our Privacy Policy for details.

Masking Sensitive Elements

In screenshots, mask sensitive content:

<!-- Password fields auto-masked -->
<input type="password" />

<!-- Custom masking -->
<div data-userhero-mask>
  Sensitive content hidden in screenshots
</div>

<!-- Exclude completely -->
<div data-userhero-exclude>
  Not included in screenshots
</div>