Hotjar
suppresses typed input by default and auto-detects names, addresses and card numbers — but no longer exists as its own product.
genuinely good privacy defaults on a product that is being dissolved into its acquirer.
hotjar's defaults are better than its reputation. the docs state 'by default, hotjar suppresses user input' — keyboard input into forms is suppressed unless explicitly allowed. on top of that it attempts to auto-detect sensitive field types, including names, addresses, phone numbers, passwords and credit cards, and suppresses text written into them. it also suppresses sequences of numbers by default, without you enabling separate numeric suppression, which catches card and phone numbers typed into fields it did not recognise.
data is stored in ireland on aws eu-west-1, which is a confirmed eu location rather than a contractual arrangement, and the tool remains the most approachable in the category for non-engineers — heatmaps, recordings and surveys without a developer in the loop.
the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.
- category
- session replay tools
- pricing
- free to 200k sessions/mo
- website
- contentsquare.com
genuinely good privacy defaults on a product that is being dissolved into its acquirer.
we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.