GDPR/CCPA export, erasure & retention

Handling a data subject request, and enforcing your retention window.

Privacy & compliance

The backend resolves GDPR/CCPA applicability per session based on visitor geography, and the Privacy page is where you act on an individual's request.

Handling a deletion or export request

  1. Open Privacy in the sidebar.
  2. Search for the affected visitor or session.
  3. Choose Export to generate a full data export, or Erase to permanently delete their sessions and events.
  4. Use Retention → Purge to manually enforce your retention window ahead of schedule if needed.
Erasure is permanent and immediate — there is no undo and no recovery window, so confirm you have the right visitor before erasing.
Masking, consent modes, and GDPR export/erasure are included on every plan, including Free. Data residency options are Enterprise-only.

Related

Consent modes

Consent-required vs legitimate-interest, and how to signal consent.

PII masking

What never leaves the visitor's browser, and how to mask more.

Pro

Visitors

Unique visitor counts, and a searchable list of individual visitor profiles.

Still have a question?

Support is included on every plan, including Free. Tell us what you're trying to do and we'll point you at the right page — or fix the docs.

Contact support