Privacy guide

What is FullStory? Deep session replay on Indian websites.

FullStory explained for users: detailed session replay and behaviour capture on Indian sites, what it can record, and the privacy concerns to check.

The simple answer

FullStory is a digital-experience tool that can capture detailed session replay: clicks, scrolls, navigation and interaction patterns across a website. It gives product teams a close view of how people actually use a page.

That depth is exactly why it deserves attention. The more precisely a tool can replay your behaviour, the more important it is that sensitive fields are masked and that users are told it is running.

What to check

1
Check whether session replay is disclosed.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

2
Avoid typing sensitive data into long forms.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

3
Look for FullStory alongside other replay tools.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

4
Ask whether sensitive inputs are masked before storage.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

From our investigation

Detailed replay needs clear disclosure.

In the investigation, replay tools were treated as sensitive because they reconstruct behaviour in detail. The stronger the capture, the stronger the disclosure should be.

What to do next

1
Limit sensitive input on pages running replay.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

2
Use privacy tools to reduce behavioural capture.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

3
Ask companies how replay data is masked and retained.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

People also ask

Is FullStory a tracker?

It is a behaviour and session-replay tool, which makes it a high-signal form of tracking for privacy purposes.

Can it capture form data?

Replay can capture interactions; responsible setups mask sensitive fields, but this is hard to verify externally.

Why is replay a privacy concern?

Because it records how you behave, not just which pages you visit, so disclosure and masking matter a lot.

If you are a company
Check your own website.

How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.

Talk to Meridian Bridge Strategy →
Your right under Indian law
Mera data mera hai.

Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.

Get the template email →
Read the full investigation.

We investigated 107 Indian company websites. The public report shows what we found.

Read the reportTry the experience