Input masking
Field contents are masked in the recording. What someone typed into a password or payment field never leaves their browser.
Recordings of real visits on your own pages, captured by the same library as the funnels and heatmaps, and attached to the contact record when the visitor signs in.

Recording is only useful if it is safe to leave on, so the defaults are the careful ones.
Field contents are masked in the recording. What someone typed into a password or payment field never leaves their browser.
A session that loses connectivity is buffered and delivered when the network returns, rather than truncated at the point the signal dropped.
Recordings are compressed before upload, which is what makes leaving replay on across a whole site affordable rather than theoretical.
A visitor identity persists anonymously and attaches to a real contact once they sign in — which is how an anonymous recording becomes part of a customer’s history.

The honest list, in the order it tends to get used.
We will find the step in the funnel, then watch three sessions that failed it with you.