fullstory-privacy-controls

What problem does it solve?

Fullstory privacy controls address the challenge of capturing rich analytics while ensuring sensitive data never leaves the user’s device. They provide a platform-agnostic approach to classify and apply privacy rules at the element level, enabling compliant data collection across web and mobile apps.

Core Features & Use Cases

• Platform-agnostic privacy controls using fs-exclude, fs-mask, and fs-unmask.
• Inheritance and override: children inherit parent rules, with the most restrictive rule prevailing.
• Compliance-ready patterns for PCI, HIPAA, GDPR, Private by Default mode, and testing guidance.
• Use Case: A banking web app can mask customer identifiers while unmasking navigation to analyze funnel.

Quick Start

Start by reading the core SKILL.md, then refer to SKILL-WEB.md and SKILL-MOBILE.md for code examples. For quick testing, apply fs-exclude to sensitive inputs (passwords, SSNs), fs-mask to PII fields (names, emails), and fs-unmask to navigation elements or non-sensitive content. Verify in replay that sensitive content is masked or excluded, and that user interactions on unmasked elements are captured.