# Reduce sensitive data exposure with build-time allowlists

DevFeed: [Reduce sensitive data exposure with build-time allowlists](<https://devfeed.tech/articles/reduce-sensitive-data-exposure-with-build-time-allowlists-2305.md>)

Original publisher: [Read original article](<https://www.datadoghq.com/blog/rum-build-time-privacy-allowlist/>)

Author: Congyao Zheng; Rick Klein; Seth Fowler

Published: 2026-08-28T00:00:00Z

Content type: article

Language: en

Sources: [Datadog | The Monitor blog](<https://devfeed.tech/sources/datadog-the-monitor-blog.md>)

Topics: [real user monitoring](<https://devfeed.tech/topics/real-user-monitoring.md>), [SDKs](<https://devfeed.tech/topics/sdks.md>), [Web Development](<https://devfeed.tech/topics/web-development.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [digital-experience-monitoring](<https://devfeed.tech/tags/digital-experience-monitoring.md>), [frontend](<https://devfeed.tech/tags/frontend.md>), [instrumentation](<https://devfeed.tech/tags/instrumentation.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [privacy](<https://devfeed.tech/tags/privacy.md>), [real-user-monitoring](<https://devfeed.tech/tags/real-user-monitoring.md>), [rust](<https://devfeed.tech/tags/rust.md>), [session-replay](<https://devfeed.tech/tags/session-replay.md>)

## AI overview

Datadog explains build-time allowlists for RUM action names. A plugin extracts static text from compiled artifacts so the Browser SDK can preserve readable static labels while masking runtime-generated text that may be sensitive.

## Source excerpt

Learn how build-time allowlists preserve useful RUM action names while reducing the risk of exposing runtime-generated sensitive data.