Strabber

Strabber is a session replay service: it records how visitors use your website so you can watch their sessions later and find out where they get stuck.

This plugin adds the Strabber recorder to every public page of your site. All you need is the Site ID from your Strabber account.

Features:

• Settings page under Settings → Strabber.
• Choose user roles (for example Administrator) whose sessions are not recorded.
• The strabber_should_record filter lets developers turn recording off for specific requests.

External services

This plugin connects to Strabber (https://strabber.com/), a session replay service run by the plugin author. Strabber is needed to record visitor sessions and let you replay them in your Strabber dashboard.

When it connects:

• Once a Site ID is saved, every public page of your site loads the Strabber recorder script from https://cdn.client.strabber.com/client.js. It is not loaded for logged-in users with a role excluded in the settings, or when the strabber_should_record filter returns false.
• The recorder only runs on pages served over HTTPS. When the page has loaded, it opens a connection to wss://recorder.strabber.com and streams the session data there until the visitor leaves the page.
• If you enable surveys in your Strabber dashboard, the recorder also loads https://cdn.client.strabber.com/survey/survey.js and sends the visitor’s survey answers to Strabber.
• Nothing is loaded and no data is sent while the Site ID is empty. Admin pages never load the recorder.

What data is sent:

• Your Site ID, so recordings are stored in your Strabber account.
• Page details: URL, title, referrer, window size, pixel ratio and scroll position.
• The page content as the visitor sees it (HTML and CSS, with scripts removed) and every change to it while the visitor is on the page.
• Visitor interactions: mouse movements, clicks, hovers, touches, scrolling, resizing, focus changes and media playback.
• Values typed into form fields (text, email, phone, number, search, date and similar fields, including hidden fields), checkbox and radio states, and pressed keys. Typed values and keys in password fields and in form fields with the data-strabber-sensitive attribute are masked and never sent.
• Depending on the settings in your Strabber dashboard: JavaScript errors, browser console messages, and network requests made with fetch() (URL, method, status, content type and duration).
• Technical details sent with every connection, such as the visitor’s IP address and browser user agent.

The recorder stores a random visitor ID in the browser’s localStorage (key __st_ui) so that sessions from the same browser can be grouped. It does not set cookies.

To keep what visitors type into a form field out of recordings, add the data-strabber-sensitive attribute to that field.

• Terms of Service: https://strabber.com/legal/terms-of-service
• Privacy Policy: https://strabber.com/legal/privacy-policy
• Cookie Policy: https://strabber.com/legal/cookie-policy

You are responsible for telling your visitors that their sessions are recorded and for getting their consent where the law requires it, for example in your site’s privacy policy.