Privacy policy clauses for Hotjar
Hotjar is a user behavior analytics platform that records website visitor sessions, including mouse movements, clicks, and scroll patterns, displayed as heatmaps and video replays. Websites use Hotjar to understand how users interact with pages and identify usability issues.
Free scan · No signup · Results in 60 seconds
What data Hotjar collects
Your privacy policy must disclose each of the following data types when you use Hotjar.
When does Hotjar trigger privacy obligations?
Installation starts data collection immediately
The moment Hotjar's SDK loads on your site, it begins collecting personal data without waiting for consent. Hotjar sets three analytics cookies (_hjSessionUser_*, _hjSession_*, _hjIncludedInSessionSample_*) and starts recording mouse movements, clicks, scroll depth, and full session replays—including visual recordings of user behavior. Under GDPR Article 4(1), session recordings and device identifiers are personal data. Under GDPR Article 5(1)(a), processing requires a lawful basis.
