Hotjar

hotjar.com · facts updated 50 minutes ago

Privacy facts at a glance
Jurisdictions
FR · US · GB · IL · SG · ES · DE · JP · AE · IT · EG · CA · NL · PT · AU · IE
Subprocessors
26
Retention
Retention duration is specified in Schedule 1 of the DPA depending on the CS Service used, but no specific number of days is stated in the excerpts provided.
Breach notification
The DPA references a 'Personal Data Incident' definition but does not state a specific notification timeframe in the excerpts provided.
Transfer mechanism
EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (EU SCCs and UK SCCs)
DPA available
Yes
Certifications
ISO 27001 · ISO 27701 · ISO 27017 · ISO 27018
GDPR addressed
Yes
CCPA addressed
Yes
Named subprocessors
Amazon Web Services, Inc. Microsoft Azure Atlassian Pty Ltd (Jira) Zendesk, Inc. Ada Support, Inc. Salesforce.com France, S.A.S. (Tableau) Content Square SAS Content Square, Inc. Content Square Ltd. Hotjar Germany GmbH Hotjar UK Limited Loris Technologies, Ltd.

Tracked documents

Privacy policy
https://www.hotjar.com/privacy/ checked 2 hours ago
Terms of service
https://www.hotjar.com/legal/policies/terms-of-service/ checked 1 hour ago
Data processing agreement
https://contentsquare.com/privacy-center/data-processing-agreement/ checked 2 hours ago
Subprocessor list
https://contentsquare.com/privacy-center/subprocessors/ checked 1 hour ago
Security / trust page
https://www.hotjar.com/security/ checked 1 hour ago

Recent changes

moderate Security / trust page 1 hour ago

Hotjar removed 'User interviews' from the list of products referenced on the security/trust page.

major Privacy policy 2 hours ago

Hotjar removed 'User interviews' from the list of products referenced in the privacy policy.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Hotjar in your workspace.

Get notified when Hotjar adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial
No card required.