Session Replay
Watch real sessions.
Zero personal data.
GhostlyX session replay records visitor interactions and replays them in your browser, with every text node masked before it leaves the visitor's device. No cookies, no fingerprinting, no PII. The first session replay tool built for privacy.
Get started free••••••••••••••••••••••
••••••••••••••••••••••••••••••••••••••••••••
Event timeline
Interactive demo with simulated data. All text is masked by default. Try the playback controls and timeline.
Zero
Cookies or fingerprints
100%
Text masked by default
Daily
Rotating visitor hash
Automatic
Rage click detection
See exactly how visitors use your site
Session replay captures the full visitor journey: mouse movements, clicks, scrolls, page navigations, viewport resizes, and JavaScript errors. You can watch a complete session from landing to exit, seeing exactly where visitors hesitate, get confused, or encounter broken elements.
Every recording is fully anonymous. All text content is replaced with bullet characters in the browser before transmission. Form inputs, paragraphs, headings, and labels are structurally preserved but the actual words are never sent to GhostlyX servers. You see the layout, the interactions, and the flow, but never the content.
Recordings are stored as compressed JSON and automatically pruned after your plan's retention period. The dashboard lets you filter sessions by device type, country, entry page, duration, and behavioural signals like rage clicks, dead clicks, and JavaScript errors.
Full session playback
Watch complete visitor sessions replayed in a sandboxed iframe. Mouse cursor, clicks, scrolls, and page transitions are all reconstructed faithfully.
Text masking by default
Every text node is replaced with length-preserved bullet characters before leaving the browser. Use data-gx-unmask to opt specific elements in, or data-gx-exclude to omit elements entirely.
Rage click detection
Automatically flags sessions where visitors clicked the same area rapidly, indicating frustration with broken or unresponsive elements.
Dead click detection
Identifies clicks on non-interactive elements where visitors expected something to happen. Reveals confusing UI patterns.
JavaScript error capture
Records uncaught exceptions and console errors alongside the session timeline, so you can see exactly what the visitor was doing when an error occurred.
Multi-page sessions
Tracks visitors across page navigations within the same session. See the full journey from landing page to conversion or exit.
Privacy at every layer
Most session replay tools collect everything: keystrokes, form data, personal content. GhostlyX takes the opposite approach. Privacy is not an afterthought; it is the foundation.
All text masked by default
Every text node in the DOM is replaced with bullet characters (preserving length) before leaving the browser. Paragraphs, headings, labels, and inputs are all masked. Only elements you explicitly mark with data-gx-unmask are transmitted as readable text.
No cookies or local storage
Session replay works without setting any cookies, using local storage, or accessing browser fingerprinting APIs. There is nothing to consent to beyond your existing analytics.
Daily-rotating visitor hash
Visitors are identified using a SHA-256 hash of their IP address, user agent, site ID, and the current date. The hash changes every day, making cross-day tracking impossible. The IP is used transiently and never stored.
GPC and DNT respected
If a visitor has Global Privacy Control or Do Not Track enabled, GhostlyX will not record any session replay data from that visitor.
Selective element exclusion
Mark sensitive sections with data-gx-exclude to omit them from the recording entirely. The element and all its children will be replaced with a placeholder in the DOM snapshot.
Automatic data retention
Session recordings are automatically pruned after 90 days on the Scale plan. No manual cleanup is needed. Recordings are stored as gzipped JSON on your configured storage disk.
Set up session replay in three steps
Add the replay attribute to your script tag
Add data-replay="true" to your existing GhostlyX tracking script. No additional scripts or libraries are needed. The replay extension is lazy-loaded only when the attribute is present.
Unmask your content (optional)
All text is masked by default for privacy. Add data-gx-unmask to layout elements (like <main> or <nav>) to make your content readable in replays. Input values and PII patterns are always redacted regardless.
Watch recordings in your dashboard
Go to Session Replays in your GhostlyX dashboard. Filter by device, country, entry page, or behavioural signals. Click any recording to watch it in the built-in player with playback controls and an event timeline.
Session replay plan
Scale
$69/mo
Up to 10,000 recordings per month
90 days data retention
Session replay is exclusive to the Scale plan. View all plans
Frequently asked questions
What is GhostlyX session replay?
GhostlyX session replay records visitor interactions (mouse movements, clicks, scrolls, and page navigations) and replays them as a video in your dashboard. Unlike traditional session replay tools, GhostlyX masks all text content by default before it leaves the browser. No personal data, cookies, or fingerprinting are involved. Every recording is anonymous and GDPR compliant out of the box.
How does session replay protect privacy?
All text nodes in the DOM are replaced with bullet characters (length-preserved masking) before the data leaves the visitor's browser. This means form inputs, paragraphs, headings, and any other text content are never transmitted to GhostlyX servers. You can opt specific elements into readable text using the data-gx-unmask attribute, or exclude elements entirely with data-gx-exclude. No cookies are set, no IP addresses are stored, and the visitor hash rotates daily.
Does session replay use cookies?
No. GhostlyX session replay does not use cookies, local storage, or any form of browser fingerprinting. Visitors are identified using a daily-rotating hash of their IP address, user agent, and site ID. The IP address is used transiently for the hash computation and is never stored.
What data does session replay collect?
Session replay records the initial DOM structure (with all text masked), subsequent DOM mutations, mouse movements, clicks, scroll positions, viewport resizes, page navigations, and JavaScript errors. Form values, passwords, and any text content are masked by default. Only structural layout information is preserved so you can see where visitors interact on the page.
What are rage clicks and dead clicks?
Rage clicks are detected when a visitor clicks the same area rapidly multiple times, which usually indicates frustration with a broken or unresponsive element. Dead clicks are clicks on non-interactive elements where the visitor expected something to happen but nothing did. GhostlyX automatically flags both patterns so you can quickly find and fix UX problems.
Which plans include session replay?
Session replay is available exclusively on the Scale plan, which includes up to 10,000 recordings per month and 90 days of data retention. Free, Pro, and Business plans do not include session replay.
Does session replay respect Do Not Track and Global Privacy Control?
Yes. If a visitor has enabled Do Not Track or Global Privacy Control in their browser, GhostlyX will not record any session replay data from that visitor. The opt-out page also allows visitors to exclude themselves from all tracking including session replay.
How do I enable session replay on my site?
Add the data-replay="true" attribute to your existing GhostlyX tracking script tag. No additional scripts or libraries are needed. Session recordings will start appearing in your dashboard within minutes.
How is session replay different from heatmaps?
Heatmaps aggregate click and scroll data across all visitors into a single visual overlay. Session replay records individual visitor journeys so you can watch exactly how a specific (anonymous) visitor navigated your site. Heatmaps show patterns across many visitors, while session replay shows the full context of a single visit including page navigations, hesitation, and errors.
How long are session recordings stored?
Session recordings on the Scale plan are retained for 90 days. After 90 days, recordings are automatically pruned. No manual cleanup is needed.
Session replay that respects your visitors
Understand how visitors interact with your site without compromising their privacy. All text masked, no cookies, fully GDPR compliant.