The GDPR-first heatmap tool.
A heatmap tool with a GDPR-first architecture: click, scroll, and move heatmaps aggregated across many sessions. Consent-first, EU-hosted, and free.
See where visitors click, how far they scroll, and where their attention gathers, per page and aggregated across many sessions.
Heatmaps are an aggregate, not individual tracking. visz.ai never follows a single person around your site. It sums interactions across visits and renders the result on top of the page.
Click heatmaps: where intent concentrates.
Click heatmaps show where attention and intent concentrate: what people actually click, including non-interactive elements they expect to be clickable.
Those “dead clicks” are often the fastest pointer to a UI problem.
Scroll heatmaps: how far visitors really get.
Per session, visz.ai records the maximum scroll depth reached and derives a visibility curve from it, in 5% bands from 0 to 100%.
On top of that: the fold line (what is visible without scrolling), the 50% drop-off, and the attention cliff, the band with the steepest drop. A page needs roughly 30 sessions for a reliable curve. Below that you get a hint instead of false precision.
Move heatmaps: mouse movement as an attention proxy.
Move heatmaps use mouse movement as a proxy for attention. They run on desktop only, since touch devices have no hover.
From dwell time and speed, visz.ai derives two patterns: hesitation zones where visitors pause (often something is unclear), and drain zones the cursor rushes straight through.
Segment instead of guessing.
Use the filter bar to build a heatmap for a single device class, traffic source, or segment. They are the same filters as Recordings, so the numbers stay consistent.
The more sessions arrive, the more meaningful every heatmap gets.
GDPR facts about heatmaps.
Aggregate, not individual tracking
Heatmaps sum interactions across many sessions. A single person is never followed around the site.
EU hosting with Hetzner
The aggregated data lives with Hetzner in the EU, with no transfer to the US.
Consent-first
Like everything in the tracker, heatmaps are consent-gated. Nothing is captured before consent, and “Do Not Track” wins.
IP anonymisation before storage
IP addresses are anonymised before they are stored. The full address never lands in the database.
To be honest: heatmaps also require your visitors' consent (§ 25 TDDDG, Art. 6 GDPR). EU hosting does not replace consent. It takes the transfer problem off your plate.
Goes well with.
Heatmaps show the where, the other building blocks deliver the why:
- Session replayWatch real visitor sessions as a replay. Consent-gated, PII masked in the browser, EU-hosted in Germany, and free with visz.ai.
- Funnel analysisBuild funnels from 2 to 10 steps (page views or events), see the drop-off per step and jump straight to the recordings behind it. EU-hosted, free.
- visz.ai vs US toolsAn honest comparison of visz.ai and typical US behaviour-analytics tools: EU hosting, GDPR, data minimisation and control vs US cloud and CLOUD Act.
- Pricingvisz.ai pricing is simple: everything is free. No tiers, no credit card, just fair volume limits as cost control. Session replay, heatmaps, funnels.
Your visitors leave. They know why, but do you? See what they see.
Your first heatmap in minutes.
Install the snippet, wire up your consent banner, watch heatmaps build up. visz.ai is free, with no tiers and no credit card.
Start for free