The GDPR-first heatmap tool.
A heatmap tool with a GDPR-first architecture: click, scroll, and move heatmaps aggregated across many sessions. Consent-first, EU-hosted, plans from €0.
See where visitors click, how far they scroll, and where their attention gathers, per page and aggregated across many sessions.
Heatmaps are an aggregate, not individual tracking. visz.ai never follows a single person around your site. It sums interactions across visits and renders the result on top of the page. They are rolled up on a schedule, not on every single event.
Click heatmaps: where intent concentrates.
Click heatmaps show where attention and intent concentrate: what people actually click, including non-interactive elements they expect to be clickable.
Those “dead clicks” are often the fastest pointer to a UI problem.
Scroll heatmaps: how far visitors really get.
Per session, visz.ai records the maximum scroll depth reached and derives a visibility curve from it, in 5% bands from 0 to 100%.
On top of that: the fold line (what is visible without scrolling), the 50% drop-off, and the attention cliff, the band with the steepest drop. A page needs roughly 30 sessions for a reliable curve. Below that visz.ai still draws it; read it as an indication, not as proof.
Move heatmaps: mouse movement as an attention proxy.
Move heatmaps use mouse movement as a proxy for attention. They run on desktop only, since touch devices have no hover.
From dwell time and speed, visz.ai derives two patterns: hesitation zones where visitors pause (often something is unclear), and drain zones the cursor rushes straight through.
Segment instead of guessing.
Use the filter bar to build a heatmap for a single device class, traffic source, or segment. They are the same filters as Recordings, so the numbers stay consistent.
The more sessions arrive, the more meaningful every heatmap gets.
GDPR facts about heatmaps.
- Aggregate, not individual trackingHeatmaps sum interactions across many sessions. A single person is never followed around the site.
- EU hosting with HetznerThe aggregated data is stored with Hetzner in the EU, with no transfer to the US.
- Consent-firstLike everything in the tracker, heatmaps are consent-gated. Nothing is captured before consent, and “Do Not Track” wins.
- IP anonymisation before storageIP addresses are anonymised before they are stored. The full address never lands in the database.
To be honest: heatmaps also require your visitors' consent (§ 25 TDDDG, Art. 6 GDPR). EU hosting does not replace consent. It takes the transfer problem off your plate.
Goes well with.
Heatmaps show the where, the other building blocks deliver the why:
- Session replayWatch real visitor sessions as a replay. Consent-gated, PII masked in the browser, EU-hosted in Germany. In every visz.ai plan.
- Funnel analysisBuild funnels from 2 to 10 steps (page views or events), see the drop-off per step and jump straight to the recordings behind it. EU-hosted, GDPR-first.
- visz.ai vs US toolsAn honest comparison of visz.ai and typical US behaviour-analytics tools: EU hosting, GDPR, data minimisation and control vs US cloud and CLOUD Act.
- PricingSimple visz.ai pricing: Free, Starter and Pro differ only in volume. Every feature in every plan, from €0. GDPR-first, EU-hosted in Germany.
Your first heatmap in minutes.
Install the snippet, wire up your consent banner, watch heatmaps build up. Every plan has every feature. Getting started costs nothing and needs no credit card.
Start for free