The screen records every click, scroll, and pause. It feels total, like a mirror of user behavior. This is session replay. Under GDPR, it is also personal data.
GDPR defines personal data broadly: any information that can identify a person, directly or indirectly. In session replay, this includes usernames, emails,