Practical website interaction privacy
Review website session replay privacy choices
Review the site notice, cookie choices and provider opt-outs. Understand what masking and retention controls belong to the website operator.
Sources checked .

Identify the provider and the site's stated configuration
Use the site's analytics notice to identify its provider, then compare the relevant documentation. Fullstory's conditional private mode illustrates why the product name alone does not establish which capture rules a site selected. Fullstory: conditional private mode and masking versus exclusion
Review consent choices without assuming all collection ends
Microsoft says Clarity can still collect page views and basic interactions without cookie consent, with fragmented sessions. Review the website's actual choices and explanation rather than treating a cookie refusal as proof of no observation. Microsoft: Clarity replay, consent and visitor opt-out FAQ
Consider the provider's documented visitor opt-out
Microsoft's Clarity FAQ points visitors to the Digital Advertising Alliance's Microsoft opt-out and says Clarity supports Global Privacy Control. Review that official guidance and the linked browser-control guide for the applicable choice. Microsoft: Clarity replay, consent and visitor opt-out FAQ
Ask which content and interactions are excluded
Microsoft says Clarity masking rules belong to project administrators. Ask the website operator about the selected rules and earlier recordings; changing masking does not retroactively protect an existing recording. Microsoft: Clarity masking rules and their limits
Read retention separately from cookie duration
Clarity's session-list documentation specifies a 30-day ordinary recording period and up to nine months for favorites and a random sample. Check the actual provider and any stated exceptions. Microsoft: Clarity recording retention and session metadata
Keep regional consent descriptions in scope
Microsoft's consent document names EEA, UK and Switzerland visits and describes shorter, single-page sessions without the required signal. It does not establish one universal consent workflow for every country. Microsoft: reporting without cookie consent in covered regions
Questions and answers
Does refusing analytics cookies prove no interaction was collected?
Microsoft describes basic collection and fragmented sessions without cookie consent. Microsoft: Clarity replay, consent and visitor opt-out FAQ
Can a visitor directly edit a website's Clarity masking rules?
Microsoft reserves those project changes to administrators. Microsoft: Clarity masking rules and their limits
Does Fullstory's mode name prove a site enabled it?
Its documentation describes the mode conditionally and requires administrator configuration. Fullstory: conditional private mode and masking versus exclusion
Sources and scope
Public Microsoft and Fullstory instructions checked 10-24-2026. Provider claims and regional requirements are attributed; a website's compliance or installed configuration was not independently tested. Clarity's shorter-session reporting is not presented as no collection. Project masking and retention are distinct from visitor browser choices.
- Changes to Clarity Reporting Without Cookie Consent. Checked 10-24-2026.
- Frequently asked questions. Checked 10-24-2026.
- Masking Content. Checked 10-24-2026.
- Session List. Checked 10-24-2026.
- Fullstory Private by Default. Checked 10-24-2026.



