Track and read results

What VisitorLayer never captures

Passwords, card numbers, and other sensitive fields.

2 min

VisitorLayer blocks sensitive fields in the visitor's browser, before anything is sent, and again when an event arrives. You cannot turn these fields on, and they can never reach a webhook or your CRM.

  • Password fields and file uploads.
  • Fields the browser marks for card details, passwords, or one-time codes.
  • Fields named for passwords, PINs, card numbers, security codes, bank account numbers, tokens, or secrets.
  • Fields named for government IDs, such as social security, tax file, or passport numbers.
  • Fields with no name, because they cannot be shown to be safe.
You choose every other field a form captures when you track it, and you can stop capturing a field at any time.

VisitorLayer never stores visitors' raw IP addresses in analytics events, and never builds browser fingerprints.

Checked against VisitorLayer on Oct 21, 2026.