Privacy guide

What is Microsoft Clarity? The screen recording tool on Indian websites.

What Microsoft Clarity does, why session replay tools matter, and what users should know about website screen recording.

The simple answer

Microsoft Clarity is an analytics tool that can show website owners how people move through a page. It can include heatmaps, scroll behavior and session replay-style views.

Session replay is useful for product teams, but users rarely expect their clicks, scrolls and form behavior to be replayed like CCTV for a website.

What to check

1
Check if the site discloses session replay or screen recording.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

2
Be careful typing sensitive data into forms.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

3
Look for tools like Clarity, Hotjar, FullStory or Contentsquare.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

4
Ask whether replay is masked before data is stored.

If this is unclear, treat it as a signal to ask the company for a plain-English explanation.

From our investigation

The page can watch how you move.

In State of Privacy, session replay tools are treated as high-signal because they capture behavior, not just page views. Good companies should be able to explain when replay is used and how sensitive fields are protected.

What to do next

1
Avoid entering sensitive data on pages that feel unnecessary.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

2
Use tracker-blocking extensions if you want less behavioral capture.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

3
Ask companies whether replay is masked and why it is needed.

Keep it practical: take one action, save proof, and avoid giving more data than the task needs.

People also ask

Does Clarity record passwords?

Responsible implementations should mask sensitive fields, but users usually cannot verify that from the outside.

Why do websites use session replay?

They use it to debug pages, improve conversion and understand where users struggle.

Should websites disclose it?

Yes, users should be told when behavior replay or similar analytics runs on a website.

If you are a company
Check your own website.

How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.

Talk to Meridian Bridge Strategy →
Your right under Indian law
Mera data mera hai.

Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.

Get the template email →
Read the full investigation.

We investigated 107 Indian company websites. The public report shows what we found.

Read the reportTry the experience