By default, IP addresses are discarded in FullStory. If you wish to view and search on IP addresses in FullStory, navigate to Settings > Data Capture and Privacy > Privacy and toggle this feature off.
FullStory may temporarily store user IP addresses while sessions are being processed, but will actively discard them once sessions are completely processed. When this option is enabled, you will not be able to view user IP addresses or search for users by IP address in the FullStory UI.
There are two purposes that IP addresses are potentially stored:
- Part of sessions and user metadata, for the purpose of making those IP addresses available and searchable in FullStory. This data is retained until the session expires. When the "Discard user IP addresses" setting is enabled, IP addresses will be actively discarded after sessions are processed.
- Part of routine access logs generated by FullStory's network services to facilitate maintenance, debugging, auditing, and detection of abusive behavior. These logs are necessary for operational and security purposes. The logs are retained for up to 30 days and are inaccessible to FullStory users.
The “Discard user IP addresses” setting affects case #1. IP addresses will not appear in sessions or user metadata when that option is enabled. however, it’s not possible to disable #2, because those logs are critical for the operation of our services.
While IP addresses for users are logged by internal FullStory services, when the "Discard user IP addresses" setting is enabled, FullStory will only store the user IP address in memory and discard it after applying the region or IP block rules.
This setting is not retroactive, so if you have already captured some IP addresses they will continue to be searchable until the session exceeds your Product analytics retention period and has been deleted.