Clean URLs

Before anything leaves the browser:

• the fragment (#…) and any credentials in the address are removed;
• sensitive query parameters (token, email, password and others, plus your site’s own list under Settings → Collection) are dropped;
• emails and long digit runs become [redacted];
• ids in paths (/users/<uuid>) become :id.

The collector applies the same rules again for any other sender.

Your own rewrites

Group pages that only differ by an id with pageUrl. Set it before the first page view:

px('pageUrl', (href) => href.replace(/\/orders\/\d+/, '/orders/:id'))

With the npm package, pass pageUrl to init(). Heatmaps use the same rewrite, so clicks on /orders/:id are shown together.