GDPR
This page is not intended to provide legal advice. We recommend you consult your own legal counsel.
Mouseflow is compliant with both Economic European Area and United Kingdom GDPR (General Data Protection Regulation). We do our best to keep our customers and their website visitors safe by aligning with the current privacy legislations around the globe. We automatically mask IP addresses and does not track ISP’s or keystrokes (non-PII fields can be whitelisted).
Our experts have outlined some GDPR basics that should be top-of-mind when seeking a new web analytics tool and we share a few alternatives to help kick off your search.
GDPR compliance checklist
No matter where you are located, GDPR is relevant for you if you handle data coming from EU citizens. While Mouseflow automatically checks of a lot of boxes regarding GDPR, a few actions might be required from you based on your location.
What you need to do
First, we ask you to review the EEA GDPR Legislation, the UK GDPR Legislation, and the definition of Personal Data.
Next, please select the appropriate column above based on where your account was created.
You need to audit your website(s) to ensure Personal Data is excluded from tracking — across all page content and form fields.
No action is required. We partially mask IP addresses automatically. You can contact us to have complete IP exclusion enabled (stricter). Note that your website visitors’ IPs from Europe, Brazil, California, and South Africa will be partially masked automatically.
You should make a test recording in our platform to ensure all exclusions of Personal Data are functioning correctly.
You may need to obtain active and explicit consent to track users on your website(s). We recommend checking the laws and regulations that apply to your website(s) and obtaining legal advice.
You may be required to offer an opt-out for tracking on your website, depending on local laws/regulations. We recommend describing that you use Mouseflow, what it’s for, and providing a link to our opt-out page.
What we do
All data is stored in an encrypted manner when sent or transmitted to/from our platform.
Only HTML data is stored in an encrypted manner on our file servers.
All visitors
We never send data outside the region in which it is originally stored (Europe/EEA).
Automatic
Automatically masked (Europe/EEA) or Excluded (Germany)
What you need to do
First, we ask you to review the EEA GDPR Legislation, the UK GDPR Legislation, and the definition of Personal Data.
Next, please select the appropriate column above based on where your account was created.
You need to audit your website(s) to ensure Personal Data is excluded from tracking — across all page content and form fields.
You may wish to mask IP addresses (just click Settings > Anonymize IPs). This removes the last tuple of IP address data. You can contact us to have complete IP exclusion enabled (stricter). Note that your website visitors’ IPs from Europe, Brazil, California and South Africa will be partially masked automatically.
You should make a test recording in our platform to ensure all exclusions of Personal Data are functioning correctly.
You may need to obtain active and explicit consent to track users on your website(s). We recommend checking the laws and regulations that apply to your website(s) and obtaining legal advice.
You may be legally required to offer an opt-out for tracking.
What we do
All data
HTML data only
We never send data outside the region in which it is originally stored (United States or EEA).
Europe/EEA visitors
Optional
Optional
For any other questions you can contact the data protection officer on privacy@mouseflow.com.
What is Mouseflow?
Mouseflow is a tool used by 210,000+ clients to analyze, understand, and improve user experience on websites.
We offer recordings, heatmaps, funnels, forms, and feedback campaigns. Learn more about our ecosystem of features.
The information collected through Mouseflow
When you visit a webpage that uses Mouseflow, the following non-personal information may be collected:
- Clicks, movements, hovers, scrolling from your mouse or trackpad
- Your device’s browser type
- Information about the device you are using (if it is a desktop, tablet or phone)
- Your browser’s language
- Your device’s operating system (e.g., IOS or Android)
- Your device’s screen resolution
- The duration of your visit on the website
- The pages you are visiting in the website (URLs)
- The content of the webpage you are visiting (HTML)
- Approximated ISP Location (City, State/Region, Country)
- Whether you were referred by another URL
- Whether you are a first-time or returning visitor
- Your replies to our Feedback Tool
The data is stored from 1-12 months, depending on the specific plan associated with a client account.
Data subject rights under the GDPR
Mouseflow requires customers to exclude any personal data from being collected from website visitors. As such, the data stored by Mouseflow is expected to be masked and not personally identifiable which would make it impossible for Mouseflow to obtain a copy, correct, or erase your data as there is no way to trace it to you.
Data Access
If you wish to obtain a copy of your data, please contact the website owner (the Data Controller)where the data was collected/obtained from. If they are unable to process your request or do not respond in a timely manner, please contact us at privacy@mouseflow.com.
Data Correction
If you wish to correct your data*, please contact the website owner (the Data Controller) where the data was collected/obtained from. If they are unable to process your request or do not respond in a timely manner, please contact us at privacy@mouseflow.com.
Data Erasure
If you wish to erase your data*, please contact the website owner (the Data Controller) where the data was collected/obtained from. If they are unable to process your request or do not respond in a timely manner, please contact us at privacy@mouseflow.com.
Revoking Consent
If you gave your consent to have information processed by Mouseflow in our feedback tool and wish to revoke it, please both contact the website owner where the data was collected/obtained (the Data Controller) and us at privacy@mouseflow.com.
Opt-Out
If you do not wish to be tracked, you can opt-out here.
This places a cookie on your computer which will prevent any further tracking (unless deleted).
We require clients to exclude Personal Data from being captured. As such, the data stored by Mouseflow is expected to be anonymous in nature. This may alter your rights above or our ability to obtain a copy, correct, or erase your data as there is no way to trace it to you.
Questions?
If you have any questions, please email privacy@mouseflow.com and we’re happy to assist.