Content Privacy Management (Masking/Whitelisting Content)
At Insightech, we take user privacy seriously and we have a few methods to help us maintain the privacy of your users, as they interact with your website. Please also see our Terms and Conditions for more details on our Privacy and PII policy.
Insightech provides two methods to help you remove PII:
- Insightech automatically masks common PII elements
- Custom PII masking (set in your account profile)
Insightech Automated Masking
Insightech automatically masks all input fields and email addresses across your website by default. This masking is completed before data leaves the visitor’s browser, which means the raw data is never transferred to, or stored by Insightech.
However, there are some cases where static text on your page may contain PII, which you will want to mask using Insightech's custom masking.
Custom PII Masking
Some elements on your website may still have personal details.
This might include:
- Address checker responses, and address drop down selectors
- Order confirmation details
- Logged in user details
- Webchat messages.
How to custom mask in Insightech
To mask your content in your profile you need to:
- Login to the tracking code settings within your profile by clicking Admin → Tracking Code → Advanced Tracking Configurations
- Put in the CSS selector of each element you want to mask, remembering to use a new line for each element.
- Save your settings and your rules will apply within the next 10-15 minutes
Recommendation - Include a Common CSS Class in your settings
It is strongly recommended that you define a common CSS class that should apply for all newly created elements that contain PII, and save it to your settings.
Your IT team can now use it to mask any content that they think might be PII, or sensitive information.
Example CSS class:
These elements can be unmasked later, using Insightech's whitelisting rules, but it provides a method that your development team can use to mask items.
This is another method to help you ensure that PII is not captured by Insightech.
These classes can be used across any 3rd party vendor platform, so we strongly recommend this strategy as good general practice for any new content.
Whitelist Specific Fields From Masking
If Insightech has automatically masked content that isn’t personally identifiable information (PII), and you’d like to make it available in the platform, don’t fear! You can whitelist these fields and they will appear in the platform.
Similar to the manual custom masking mentioned above, content can be whitelisted by inputting the appropriate CSS selectors (class, or unique path) the Whitelist / Allowed Fields input
Recommendation - Always be very careful what you whitelist, so that no PII is captured. If it is not essential to whitelist elements, then it is recommended not to.