FullStory is a session-replay and digital experience intelligence (DXI) platform operated by Fullstory, Inc., a private Delaware corporation headquartered in Atlanta with offices in London, Sydney and Singapore, led by named CEO/co-founder Jason Wolf and a named executive team. Its own privacy policy describes the core product mechanism: when a Fullstory Customer deploys the Services on their website, Fullstory captures a User's mouse movements, clicks, page visits, text entered, and other on-page actions via first-party cookies and local storage (not third-party/cross-site cookies), acting as a data processor with no direct relationship to the site visitor. The policy states Fullstory 'takes pains in its engineering choices to differentiate itself from ad-tracking software,' prohibits its customers from building multi-site user profiles for demographic-list sale, and states it does not sell or share customer/user data with non-agent third parties. Data protection is described only in general terms (a combination of physical, technical, organizational and administrative safeguards); no named-firm audit report, transparency report with counts, or regulator/breach action was found in this research.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
9 ON FILE
[2020-06-24] · COLLECTION
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the service collect personal data from third parties? — Yes, but for critical data only.
FullStory's privacy policy states that for Users of a Fullstory Customer's website, it logs details of their visits including mouse movements, clicks, page visits, text entered, time spent on a page, and other actions on the customer's website.
FullStory's About Us page publicly names its executive team, including Jason Wolf as CEO and Co-founder, Chad Gold as President, Claire Fang as Chief Financial Officer, and David Woolston as Chief Product and Technology Officer, with the company headquartered in Atlanta and offices in London, Sydney and Singapore.
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy outline the service's general security practices? — Somewhat.
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the service allow third-party access to private personal data? — Yes, all parties specified (only to critical service providers).
FullStory's privacy policy states the company engineers its product to differentiate itself from ad-tracking software and prohibits customers, under its Acceptable Use Policy, from building multi-site user profiles for the purpose of selling or exchanging demographic user lists; it separately states FullStory does not sell customer or user data to third parties or share it with non-agent third parties.
FullStory's privacy policy states the company takes 'reasonably necessary precautions' using a combination of physical, technical, organizational, and administrative safeguards to protect collected information, without naming a specific auditor, certification, or transparency report; no breach disclosure or regulator action was found in this research.
FullStory's privacy policy states the Services use first-party cookies and local storage, scoped to a single website, to maintain session continuity for a user across pages of that site, rather than third-party or cross-site tracking cookies.