Skip to main content

Session Requirements for Data Privacy & Compliance

data privacy, compliance, user behavior, consent management, bot traffic, session length, form masking, geographic restrictions

Updated over 6 months ago

At heatmap.com, we prioritize data privacy and compliance while providing valuable insights into user behavior. This article outlines our session requirements to ensure both data accuracy and user privacy protection.

What are Session Requirements?

Session requirements define the criteria for capturing and analyzing user interactions on your website. These requirements help maintain data integrity while adhering to privacy standards.

Key Session Requirements:

1. Minimum Session Duration

- We require a minimum session duration of 5 seconds.

- Sessions shorter than 5 seconds are not recorded to avoid capturing accidental or bot traffic.

2. Maximum Session Length

- Sessions are capped at 60 minutes of continuous activity.

- After 60 minutes, a new session begins if the user continues to interact with the site.

3. Inactivity Timeout

- Sessions automatically end after 10 minutes of inactivity.

- This helps distinguish between actual user engagement and instances where a user may have left the browser open.

4. Data Exclusion Criteria

- We do not record or analyze sessions from known bot or crawler IP addresses.

- Sessions from your company's IP addresses can be excluded upon request to prevent internal traffic from skewing data.

5. Personal Information Handling

- By default, all form fields are masked to prevent capturing sensitive information.

- Custom unmasking can be implemented for non-sensitive fields through our API.

6. Consent Management

- Our system respects user consent settings as configured in your website's consent management platform.

- Sessions are not recorded for users who have not provided consent for analytics tracking.

- Declined consent is reported to us by SDK. It is the responsibility of the website owner to report declined consent.

7. Geographic Restrictions

- You can configure geographic restrictions to comply with regional data protection laws.

- Sessions from restricted regions will not be recorded or analyzed.

Implementing Session Requirements:

1. Install the latest version of the heatmap.com tracking script on your website.

2. Configure your account settings to align with these requirements.

3. Use our API to customize data collection based on your specific needs and compliance requirements.

Best Practices:

- Regularly review and update your privacy policy to reflect these session requirements.

- Inform your users about the use of analytics tools and provide clear opt-out instructions.

- Periodically audit your heatmap.com settings to ensure compliance with evolving data protection regulations.

For more information on configuring these settings or customizing session requirements for your specific use case, please contact our support team at support@heatmap.com.

Remember: Balancing insightful analytics with user privacy is crucial. These session requirements are designed to help you achieve that balance effectively.

Did this answer your question?