Session & Identity Architecture
Secure, privacy-compliant session tracking with complete data ownership and automatic user isolation
🔐 Three-Tier Identity Architecture
Survives restarts
Per browser tab
Cross-device
🛡️ GDPR & Privacy Compliance
📋 Lawful Basis
Recording starts only after your consent mechanism approves. Respects existing cookie consent.
🗑️ Right to Erasure
Full data deletion via API. Remove all sessions, replays, and events for any user on demand.
🔐 Data Minimization
Privacy-by-default masking. All inputs masked automatically. Sensitive data detection blocks PII.
🏠 Data Residency
Self-hosted deployment means your data stays in your infrastructure. Choose your region.
🔒 Automatic User Isolation
Safe User Switching on Shared Devices
When identify() detects a different user, Claymore automatically isolates sessions
// User A logs in
Claymore.push('identify', ['user-alice@example.com']);
// Session: abc-123, linked to Alice
// Later, User B logs in on same device
Claymore.push('identify', ['user-bob@example.com']);
// Automatic: Session abc-123 flushed
// Automatic: New session xyz-789 created
// Automatic: xyz-789 linked to Bob
// Result: Alice and Bob histories are completely separate🔄 OAuth & Redirect Resilience
to localStorage
sessionStorage cleared
localStorage backup
Session continues
🏆 Security & Privacy Comparison
| Feature | Claymore | Hotjar | MS Clarity | FullStory |
|---|---|---|---|---|
| Self-Hosted Option | ✓ Full Control | ✗ SaaS Only | ✗ SaaS Only | ✗ SaaS Only |
| Data Ownership | ✓ 100% Yours | Shared | Microsoft | Shared |
| Data Residency Control | ✓ Any Region | EU/US | Azure Regions | US/EU |
| Auto User Isolation | ✓ Automatic | ✗ Manual | ✗ Manual | ✓ Automatic |
| Default PII Masking | ✓ All Inputs | ✓ Inputs | ✓ Inputs | Opt-in |
| Third-Party Data Sharing | ✓ None | Analytics | Microsoft | Limited |
| OAuth Redirect Support | ✓ Built-in | ✗ Breaks | ✗ Breaks | ✓ Yes |
| GDPR Data Deletion | ✓ Full API | ✓ Yes | ✓ Yes | ✓ Yes |
| Pricing | Self-hosted | $32-171/mo | Free | $199+/mo |
📐 Industry Standards Compliance
🇪🇺 GDPR
Full EU compliance
Consent-first, data deletion API🇺🇸 CCPA
California Privacy Act ready
Do-not-sell signals respected🔐 SOC 2
Architecture ready
Inherits your certifications🏥 HIPAA
Self-hosted capable
Deploy in BAA infrastructure📋 What We Have & What's Coming
✅ Available Now
- Three-tier identity model (Device → Session → User)
- Automatic user isolation on shared devices
- OAuth redirect resilience
- Privacy-by-default input masking
- Self-hosted deployment option
- GDPR/CCPA compliance ready
- Full data deletion API
- 30-minute session timeout
🚀 Coming Soon
- Per-tenant encryption keys
- SSO/SAML integration
- Advanced RBAC permissions
- Audit log export
- Configurable data retention
- Consent management integration
- AI-powered PII detection
- Mobile SDK (iOS/Android)
💡 The Claymore Difference
Other services: Your session data lives on their servers, shared across their platform, subject to their policies.
Claymore: Self-hosted deployment means 100% data ownership. Your infrastructure, your rules, your compliance.
Privacy isn't a feature. It's the architecture.