Personal Data Information
Last updated
Was this helpful?
Last updated
Was this helpful?
Was this helpful?
On this page you will find described the data that UXWizz uses and stores on user's PC and on your own server about your visitors that are being recorded using the tracker.js script.
UXWizz does not store cookies on the user's PC .
UXWizz stores data in sessionStorage to identify the current browser session. This unique ID is destroyed once the user ends their session (closes the browser tab). This session ID can't be used to identify the same user user between two distinct visits.
UXWizz also uses localStorage to store user preferences (eg: disable tracking) and for performance improvements as a caching layer before sending data to the server. No data stored in localStorage is sent to the server or used for user tracking purposes.
The following data might be considered personal information and could be used to indirectly associate a person's identity to a specific recorded session:
For each user visit an unique ID is assigned that is only valid for the current browsing session.
Hash of IP + User Agent of the user. (the admin can also decide to save the plain, not hashed, IP).
Using the IP, geolocation data will be generated (Country and optional City).
Browser version and screen resolution.
Date of visit, visit duration, pages visited.
(Optional) Actions done by the user on that site, (unless otherwise disabled by the administrator), such as:
Mouse movements, clicks and scroll activity
Window resizing events
Keyboard input on fields that have not been excluded from tracking
(Optional) If the full tracking system is being used, the page content (except the ignored elements) can also be sent to the server.
(Optional) Tags which can be created by specific user actions defined by the webmaster (eg. clicked a button).
(Optional) Events which can be created by specific user actions defined by the webmaster (eg. clicked a button).
Note that point (6) above might lead to sensitive information being tracked about the user. It is the webmaster's responsibility to make sure that the tracker is not included on any pages where the user has to enter sensitive information, or at least to disable tracking the form inputs which ask for sensitive information if the user did not consent to this data being stored.
The data mentioned above is stored in order to aid with improving the user experience by analyzing common user behavior, more precisely it is used to:
Playback recordings of the visit. (eg: so the webmaster can understand why the user did or did not perform a specific action.)
Generate aggregated heatmaps/scrollmaps, used to understand which parts of the website's UI draw the most attention.
Have an overview of the traffic reaching the website in order to improve the quality of this traffic and possible conversion rates.
Most stats and tools should ultimately be used for improving the user experience.
Any visitor accessing a domain where UXWizz is installed can disable tracking by accessing any of the pages of that domain where the tracker is installed and add ust-opt-out query string like this:
www.example.com?ust-opt-outDoing this will save a flag in localStorage so future visits will not be tracked in any way.
You can also re-enable tracking by using the query stringust-opt-in.
The UXWizz dashboard admin can also decide (using the tracking settings) to:
respect or not the doNotTrack flag of the browser
show or not a consent pop-up
Q: How can the user ask for deletion of his data? A: As the user's token is destroyed from their machine after the session ends, by default, the only cross-session personally identifiable information is the IP+User Agent hash. The user can contact the webmaster and ask for his data to be removed based on the IP+UA mentioned if those have not changed. If those have changed (eg. dynamic IP or browser was updated), by default, there is no way to uniquely identify the user anymore.
Q: Can a specific individual be associated with a session? A: Unless there is other personal data stored (as mentioned in points 1.6, 1.7, 1.8), the recorded data can not be considered personal information as the actual person or device that generated the visit can not be associated with a specific session.
Q: How long is data stored for? A: By default, the number of sessions stored is limited (to 100.000, but the limit can be altered by the webmaster) and once this limit has been reached old sessions will be replaced by newer ones. Data can also easily be permanently deleted, individually or in bulk, by the webmaster. Unless deleted using the aforementioned methods the data is stored indefinitely.
Being self-hosted, UXWizz does not send any dashboard usage data to external servers.
i.e. we don't save data about webmasters when they access your UXWizz dashboard.
There are cookies saved on the webmaster's own PC when they log into the UXWizz dashboard in order to maintain the login session.