Paid user testing may capture your voice, face, screen, typed responses, and device interactions, depending on the study. You may refuse or stop a test, but stopping collection does not automatically delete material already shared with a researcher. Paid user testing means evaluating a product, website, or idea in exchange for payment or another reward. Before participating, check what will be recorded, who will receive it, how long it will remain available, and how to request access or deletion.
Official resources:
- Explore the official data from Ca — Use this primary source to review the underlying data.
- Read the official guidance from Org — Use this primary source to verify the official guidance.
Table of Contents
- What data can a paid test collect?
- What does the recorder actually capture?
- What should informed consent tell you?
- Who handles access or deletion requests?
- Which participant rights may apply?
What data can a paid test collect?
Separate account data from study data. Account data may include your identity, contact details, demographics, device information, usage history, and payment information. Study data covers what you say, type, show, and do during a session. UserTesting's Privacy Policy classifies responses, audio, video, screen recordings, and behavioral information as "Survey Data." It also says study sponsors control privacy practices for personal information participants provide during a test.
A recording can reveal information the questionnaire never asks for. Notification banners, open tabs, bookmarks, account names, photographs, and documents may appear on screen. Your surroundings or other people's voices could also enter an audio or video recording. Before starting:.
- Close unrelated applications, tabs, messages, and files.
- Turn off notification previews and screen-sharing indicators.
- Use test credentials when the researcher provides them.
- Avoid displaying passwords, financial records, medical information, or another person's data.
- Leave the study if completing it requires information you did not expect to disclose.
What does the recorder actually capture?
Recording varies by test type, so do not assume every UserTesting session works the same way. Its Contributor Terms say a completed test can record voice, video, face, screen content, text inputs, and screen or device interactions for the customer. UserTesting's Invite Network Privacy Guide describes a narrower setup: only voice and screen are recorded, collection ends with the session, and the system does not record clicks or keystrokes or access files.
The completed recording is still made available to the researcher. "Does not access files" does not mean the screen is private. A document, filename, message, or password manager shown on the recorded display can still become part of the video. If the consent page and recording indicator describe different capture methods, pause and ask the researcher before continuing.
What should informed consent tell you?
Consent should arrive before data collection and explain the study in practical terms. Look for the recording method, purpose, data recipients, confidentiality protections, storage period, sharing plans, withdrawal process, and deletion options. Prolific requires researchers to provide those details and keep a timestamped record of affirmative consent, according to its researcher consent guidance. Prolific also warns researchers that pseudonymized participant IDs remain personal data, even when names and email addresses are withheld.
Do not treat an "I agree" button as enough information by itself. Save the consent notice and researcher contact details before beginning. If the notice is vague about recording, retention, or outside sharing, request clarification or decline the study. UserTesting's contributor guidance says declining or quitting a test that seeks personal information does not affect later invitations or the contributor's score. Participants may also pause or stop an Invite Network session, with nothing processed after stopping.
Who handles access or deletion requests?
The platform and the study sponsor may hold different data. The platform may retain account, payment, device, or participation records, while the sponsor may receive the study responses and recording. UserTesting says the sponsor controls privacy practices for personal information provided within a test.
Consequently, a request sent only to UserTesting may not reach the organization holding the completed recording. Use the study notice to identify the named creator or sponsor and contact it directly when necessary. A useful request should include: Stopping a session, withdrawing consent, and deleting existing data are separate actions. The UK ICO's consent guidance says withdrawal stops future consent-based processing but does not undo processing that was lawful before withdrawal.
- The study name and participation date.
- The researcher or sponsor's name.
- Your participant or account identifier.
- Whether you want access, correction, withdrawal, or deletion.
- A clear reference to the session recording and submitted responses.
Which participant rights may apply?
Legal rights depend on your location, the organization handling the data, and whether the relevant privacy law covers that organization. A platform's voluntary privacy controls may also differ from rights enforceable under law. Covered California residents can request information about collected, used, and shared data; ask for correction or deletion subject to exceptions; limit certain uses of sensitive data; and opt out of sale or sharing.
Covered businesses must provide methods for exercising these rights, according to the California Department of Justice's CCPA guidance. Keep the consent notice, invitation, completion confirmation, researcher contact details, and copies of privacy requests. If a sponsor denies a request, ask it to identify the reason, the data involved, and any available appeal or complaint process.
