TapCub is live — analytics, insights and live chat, free on one platform
Help center

Who on my team can see visitors’ personal data?

What the three masking levels show, the defaults per role, and how to tighten them for a specific member.

Live chat1 min readLast updated Oct 28, 2026TapCub teamPart of Team members, roles and agent routing

Short answer

Display masking has three levels — none, partial and full. By default Admins see identifiers in the clear, Analysts see them partially masked, and Viewers see them fully masked. An Admin can set a stricter floor per member; the strictest setting wins.

Three masking levels

Display masking decides how much of an identifier — an email, a phone number — a role sees:

LevelWhat it shows
NoneThe identifier in the clear.
PartialThe first character and the domain of an email, the last four digits of a phone, and the ends of other strings.
FullThe identifier fully masked.

Defaults: Admins see identifiers in the clear; Analysts see direct identifiers partially masked; Viewers see them fully masked.

Tighten it per member

An Admin can change the policy per role and set a stricter floor for an individual member — the strictest level always wins. This is how you give a contractor the inbox without exposing customer emails. Deleting stored personal data is a different task, covered in export and deletion.

Masking only changes what is displayed; it does not delete anything. The underlying rows are governed by your retention and deletion settings.

Did this answer your question?

We use your answers to fix and expand this page.

See your data clearly. Find your growth.

Every click, backed by data. Install one line of code and see your first numbers in a minute.

No credit card · Free plans for analytics and chat · Cookieless analytics