Hide private details
Show the app. Never show the customer.
The EU's GDPR says a breach must be reported to the regulator not later than 72 hours after you become aware of it, where that is possible.”
Two passes
The Recorder covers on your computer. StepLoom AI reads every screen again for what was missed.
Formats from many countries
Card numbers, emails, phone numbers, bank accounts and ID numbers such as Social Security, Aadhaar, BVN and NIN.
You have the last word
Every cover is a box you can turn off, move or add.
Baked in
When you publish, the covers are drawn into the picture. They cannot be peeled away.
Made for teams who explain an app every day
Every screen is read for private details
Each item found is marked with a box and a label that says what it is.
Pick what to hide
Turn a cover off if the item is not private. Turn it on to hide a kind everywhere.
Hiding 8 of 8 kinds on every step
- Card numbers
- Emails
- Phone numbers
- Bank account numbers
- National ID numbers
- Names
- Balances
- Passwords
Two layers of care
The Recorder covers first, on your computer. Then the second pass looks again.
Before and after
Slide to see what a viewer would have seen and what they see now.
Hidden for good
The published picture has the covers drawn into it. The original stays private to your workspace.
We planted 33 made-up private details and checked every one
This is a controlled test on a practice app built for it. Every detail is made up and every screen of the practice app says so. Here is what was planted, what each pass caught, what it covered by mistake and what the test cannot tell you.
Method
What we did
What was planted
33 made-up private details: 15 inside form fields and 18 as page text. Kinds: phone numbers, email addresses, passwords and PINs, BVN, card security codes, NIN, one-time codes, bank account numbers, card numbers and expiry dates, names, balances and amounts and home addresses.
Where
Practice Bank, a made-up bank app built for this test, with 8 screens. Every screen says “Practice app, made-up data”.
How it was recorded
The real StepLoom Recorder recorded 8 clicks in 22 s and saved 9 step pictures. StepLoom AI then read the same pictures in 26.6 s.
How it was scored
Hidden by the Recorder: at least 80 percent of the item's pixels are black in the saved picture. Found by StepLoom AI: one of its boxes covers at least 60 percent of the item and is no larger than 12 times its area.
Results
What each pass caught
Each planted detail was checked in the saved pictures. The Recorder covers before a picture is saved. StepLoom AI reads the saved pictures for what is still visible.
33 of 33
hidden by the Recorder or found by StepLoom AI
19 of 33
hidden by the Recorder before the picture was saved
14 of 14
found by StepLoom AI, of those the Recorder left visible
0 of 33
left readable after both passes
| Kind | Planted | Recorder hidHidden by the Recorder | StepLoom AI foundFound by StepLoom AI | Missed |
|---|---|---|---|---|
| Phone numbers | 4 | 4 | 0 | 0 |
| Email addresses | 3 | 3 | 0 | 0 |
| Passwords and PINs | 2 | 2 | 0 | 0 |
| BVN | 1 | 1 | 0 | 0 |
| Card security codes | 1 | 1 | 0 | 0 |
| NIN | 1 | 1 | 0 | 0 |
| One-time codes | 1 | 1 | 0 | 0 |
| Bank account numbers | 5 | 4 | 1 | 0 |
| Card numbers and expiry | 3 | 2 | 1 | 0 |
| Names | 5 | 0 | 5 | 0 |
| Balances and amounts | 4 | 0 | 4 | 0 |
| Home addresses | 3 | 0 | 3 | 0 |
| All kinds | 33 | 19 | 14 | 0 |
- By where it sat. The Recorder hid 11 of 15 details inside form fields and 8 of 18 written as page text.
- What it left. It hid none of the names, balances and amounts and home addresses. StepLoom AI found all 14 it left.
- Partly hidden. The Recorder hid 4 of 5 bank account numbers and 2 of 3 card numbers or expiry dates. The account number written with spaces and the card expiry stayed visible until StepLoom AI boxed them.
False alarms
What was covered that was not private
A good check hides what is private and leaves the rest. We planted harmless look-alikes and counted how many each pass covered.
Look-alikes planted
20 harmless things that look private: order numbers, dates, reference codes, a branch code, a version, a fee and a limit. 2 of them have the same digit shape as a real ID or account number (an 11 digit request id and a 10 digit tracking number).
Covered by the StepLoom Recorder
2 of 20. Both were the two with the shape of an ID or account number.
Boxed by StepLoom AI
3 of 20: the 11 digit request id, a transaction reference code and a fee. It drew 21 boxes in all; 0 were on nothing, and 2 were on details the Recorder had already hidden.
What a false alarm costs
A cover on something that is not private hides a little too much. Every cover is a box you can turn off in the editor before you publish.
| Harmless, but covered | By the Recorder | By StepLoom AI |
|---|---|---|
| request id, 11 digits (same shape as an ID number) | Yes | Yes |
| transaction reference code | No | Yes |
| a fee | No | Yes |
| tracking number, 10 digits (same shape as an account number) | Yes | No |
Try it
Try the practice demo
This is the published demo of the test: the Recorder's black covers and the boxes from StepLoom AI, drawn into the pictures. Look for anything readable. Every name, number and balance in it is made up.
Limitations
- One practice app, 8 screens, one run and one pass of StepLoom AI. It was not repeated, so there is no spread, and 33 items is a small count.
- The data is made up and the layout is clean: Latin script, English only, a plain page. Real apps are messier.
- Text drawn inside an image or a canvas is not page text. This test had none, no pictures of cards or IDs, no QR codes and no scrolled pages, so it gives no result for them.
- The Recorder's rules go by shape and field name, so they hide what looks like a phone number, an email or an ID and miss what does not, such as names, balances and addresses. StepLoom AI covers that gap in this run, and it can miss things too.
- The scores depend on the rules above (80 percent, 60 percent and 12 times). Looser or stricter rules change the StepLoom AI numbers. We did not try others.
- These numbers describe this build on this app. They are not a rate for every app. Look at the covers on your own demo before you share it.
Every test behind a number on this site, with its method, is gathered on How we test.
A demo should teach the screen, not leak the customer.
Case study
StepLoom recording StepLoom
A real run, from the first click to the shared link, with every number measured.
Nigeria's data protection law is another example: consent must be provable, and a breach that puts people at risk must be reported within 72 hours.”
Nigeria Data Protection Act 2023
A law-firm guide's plain summary of the consent and breach rules.
Read the sourceFrequently asked questions
- Card numbers, emails, phone numbers, bank account numbers, national ID numbers (such as Social Security, Aadhaar, BVN and NIN), names, passwords and balances.
- Yes. Draw a box on any step and it is hidden like the others.
- No. Covers are drawn into the published picture.
- The original stays private in your workspace so you can edit later.