Session replay, GDPR-first.
Session replay at visz.ai means: replays of real visitor sessions, PII masked in the browser, recording only after consent. GDPR-first, hosted in the EU. Plans from €0.
Watch real visitor sessions as a replay and see exactly how people use your site: where they get stuck, where they abandon, what happened right before they left. A recording is playable while the visit is still running.
Nothing is recorded before consent. Sensitive input is masked before anything leaves the browser. Core operation and storage are in the EU; the subprocessor list names any exceptions.
DOM recording, not video.
Recordings are captured with rrweb. The DOM and user interactions are recorded, not a video stream. Replays stay lightweight and text stays crisp.
A recording is one visit. Use the timeline to skip idle time, and the speed controls to scan quickly.
Before consent: nothing.
Before consent there are zero events, recordings, or fingerprints. The snippet is built to run behind a consent banner and supports Google Consent Mode.
A set “Do Not Track” signal overrides everything else.
PII stays in the browser.
Passwords, credit-card fields, and other sensitive inputs are masked client-side before anything leaves the browser. You see the interaction, never the secret behind it.
Per site you choose the masking mode. “Mask everything” (recommended) also covers checkout and payment fields, and a CSS selector lets you mask additional elements on purpose.
From replay to root cause.
Each replay sits next to the session's filters and frustration signals. You jump from “what happened” to “why it mattered”.
The list is filterable by device, source, and behavior. Recordings respect your retention window and can be deleted per session.
GDPR facts about session replay.
- EU hosting with HetznerReplays and metadata are stored with Hetzner in the EU. Your visitors' data is not transferred to the US.
- PII masking in the browserSensitive input is masked client-side before it is sent. It never even reaches our servers.
- IP anonymisation before storageThe full IP address is never persisted. It is anonymised before anything is stored.
- Consent-firstRecording starts only after consent. Before that there are no events, no recordings, no fingerprints.
To be honest: you still need your visitors' consent for session recording with visz.ai (§ 25 TDDDG, Art. 6 GDPR). EU hosting does not replace consent. It takes the transfer problem off your plate.
Goes well with.
Session replay is strongest in combination with the other building blocks:
- HeatmapsClick, scroll and move heatmaps, aggregated across sessions: see where visitors click and how far they scroll. GDPR-first, EU-hosted, no sampling.
- Funnel analysisBuild funnels from 2 to 10 steps (page views or events), see the drop-off per step and jump straight to the recordings behind it. EU-hosted, GDPR-first.
- visz.ai vs US toolsAn honest comparison of visz.ai and typical US behaviour-analytics tools: EU hosting, GDPR, data minimisation and control vs US cloud and CLOUD Act.
- PricingSimple visz.ai pricing: Free, Starter and Pro differ only in volume. Every feature in every plan, from €0. GDPR-first, EU-hosted in Germany.
Watch your first session today.
Install the snippet, wire up your consent banner, watch replays. Every plan has every feature. Getting started costs nothing and needs no credit card.
Start for free