@consenttheater/playbill 0.1.1 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (22) hide show
  1. package/README.md +49 -59
  2. package/dist/actors/advertising.json +2413 -2412
  3. package/dist/actors/analytics.json +2653 -2648
  4. package/dist/actors/consent.json +89 -89
  5. package/dist/actors/data_leak.json +822 -819
  6. package/dist/actors/fingerprinting.json +205 -205
  7. package/dist/actors/functional.json +1098 -1092
  8. package/dist/actors/marketing.json +728 -727
  9. package/dist/actors/security.json +90 -90
  10. package/dist/actors/session_recording.json +161 -161
  11. package/dist/actors/social.json +325 -325
  12. package/dist/actors/tag_manager.json +44 -44
  13. package/dist/index.d.ts +16 -10
  14. package/dist/index.d.ts.map +1 -1
  15. package/dist/index.js +20 -12
  16. package/dist/types.d.ts +25 -29
  17. package/dist/types.d.ts.map +1 -1
  18. package/dist/types.js +8 -3
  19. package/package.json +3 -7
  20. package/dist/scorer.d.ts +0 -42
  21. package/dist/scorer.d.ts.map +0 -1
  22. package/dist/scorer.js +0 -97
package/dist/actors/session_recording.json CHANGED
@@ -3,168 +3,168 @@
3
3
  "description": "Heatmaps, session replays, screen recording, click tracking, scroll tracking",
4
4
  "stats": { "cookies": 70, "domains": 91, "companies": 53 },
5
5
  "cookies": {
6
- "ANONCHK": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Indicates whether MUID is transferred to ANID, used for advertising purposes by Microsoft", "severity": "medium", "lifetime": "10 minutes", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
7
- "CLID": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Identifies the first time Clarity saw this user on any site using Clarity", "severity": "medium", "lifetime": "1 year", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
8
- "SM": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Synchronizes the MUID across Microsoft domains for cross-site analytics", "severity": "medium", "lifetime": "session", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
9
- "__insp_uid": { "company": "Inspectlet", "service": "Inspectlet", "category": "session_recording", "description": "Unique Inspectlet user identifier for session replay and visitor segmentation", "severity": "medium", "lifetime": "1 year", "docs_url": "https://www.inspectlet.com/legal" },
10
- "__insp_wid": { "company": "Inspectlet", "service": "Inspectlet", "category": "session_recording", "description": "Inspectlet session recording window identifier for heatmap and funnel analytics", "severity": "medium", "lifetime": "1 year", "docs_url": "https://www.inspectlet.com/legal" },
11
- "__uf_*": { "company": "Userflow", "service": "Userflow", "category": "session_recording", "description": "Userflow product tour and onboarding cookie for tracking user progress through guided flows", "severity": "medium", "pattern": true, "lifetime": "1 year", "docs_url": "https://userflow.com/privacy" },
12
- "_browsee_id": { "company": "Browsee", "service": "Browsee Session Replay", "category": "session_recording", "description": "Browsee session recording visitor identifier for persistent session replay tracking across visits", "severity": "high", "lifetime": "1 year", "docs_url": "https://www.browsee.io/privacy-policy" },
13
- "_capturly_id": { "company": "Capturly", "service": "Capturly Session Recording", "category": "session_recording", "description": "Capturly visitor identifier for session recording, heatmap, and form analytics tracking", "severity": "high", "lifetime": "1 year", "docs_url": "https://capturly.com/privacy-policy" },
14
- "_ce.clock_data": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "description": "Crazy Egg session timing cookie for accurate time-on-page measurement in recordings", "severity": "medium", "lifetime": "session", "docs_url": "https://www.crazyegg.com/privacy" },
15
- "_ce.clock_event": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "description": "Crazy Egg clock synchronization cookie for aligning events in session recordings", "severity": "medium", "lifetime": "session", "docs_url": "https://www.crazyegg.com/privacy" },
16
- "_ce.s": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "description": "Crazy Egg session recording cookie for heatmap and user session replay tracking", "severity": "high", "lifetime": "1 year", "docs_url": "https://www.crazyegg.com/privacy" },
17
- "_ceir": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "description": "Tracks whether a visitor is a returning user across Crazy Egg recording sessions", "severity": "medium", "lifetime": "5 years", "docs_url": "https://www.crazyegg.com/privacy" },
18
- "_clck": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Persists the Clarity user ID and preferences for session replay and heatmap analytics", "severity": "medium", "lifetime": "1 year", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
19
- "_clsk": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Connects multiple page views by a user into a single Clarity session recording", "severity": "medium", "lifetime": "24 hours", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
20
- "_cs_c": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "description": "Contentsquare consent state cookie recording user's consent for session recording", "severity": "low", "lifetime": "13 months", "docs_url": "https://contentsquare.com/privacy/" },
21
- "_cs_ex": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "description": "Contentsquare exclusion cookie marking users who opted out of session recording", "severity": "low", "lifetime": "30 days", "docs_url": "https://docs.contentsquare.com/uxa-en/#cookies" },
22
- "_cs_id": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "description": "Contentsquare visitor identifier cookie for session replay and UX analytics", "severity": "medium", "lifetime": "13 months", "docs_url": "https://contentsquare.com/privacy/" },
23
- "_cs_mk_aa": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "description": "Contentsquare Adobe Analytics integration cookie for cross-platform analytics correlation", "severity": "medium", "lifetime": "session", "docs_url": "https://contentsquare.com/privacy/" },
24
- "_cs_s": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "description": "Contentsquare session cookie for grouping page views into sessions for analysis", "severity": "medium", "lifetime": "30 minutes", "docs_url": "https://contentsquare.com/privacy/" },
25
- "_dd_replay_*": { "company": "Datadog", "service": "Datadog Session Replay", "category": "session_recording", "description": "Datadog session replay cookie — infrastructure monitoring tool recording browser sessions including DOM mutations and user interactions", "severity": "critical", "pattern": true, "lifetime": "session", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
26
- "_fs_uid": { "company": "FullSession", "service": "FullSession Recording", "category": "session_recording", "description": "FullSession visitor identifier for session recording and interaction analytics", "severity": "high", "lifetime": "1 year", "docs_url": "https://www.fullsession.io/privacy-policy" },
27
- "_gcl_gs": { "company": "Google", "service": "Google Optimize", "category": "session_recording", "description": "Google Optimize session experiment cookie for maintaining A/B test variation assignment during a session", "severity": "medium", "lifetime": "session", "docs_url": "https://developers.google.com/optimize" },
28
- "_gs_*": { "company": "Gainsight", "service": "Gainsight PX", "category": "session_recording", "description": "Gainsight PX product experience cookie for tracking feature adoption and user engagement patterns", "severity": "high", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.gainsight.com/privacy/" },
29
- "_hjAbsoluteSessionInProgress": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Detects the first pageview session of a user to control total session data tracking", "severity": "medium", "lifetime": "30 minutes", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
30
- "_hjClosedSurveyInvites": { "company": "Hotjar", "service": "Hotjar Feedback", "category": "session_recording", "description": "Hotjar cookie preventing a dismissed survey from reappearing to the same visitor", "severity": "low", "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
31
- "_hjCookieTest": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar test cookie to verify the browser accepts cookies before setting tracking cookies", "severity": "low", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
32
- "_hjDonePolls": { "company": "Hotjar", "service": "Hotjar Feedback", "category": "session_recording", "description": "Hotjar cookie preventing completed polls from being shown again to the same user", "severity": "low", "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
33
- "_hjFirstSeen": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar cookie identifying the first session of a new user for initial pageview event tracking", "severity": "medium", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
34
- "_hjMinimizedPolls": { "company": "Hotjar", "service": "Hotjar Feedback", "category": "session_recording", "description": "Hotjar cookie keeping polls minimized after the user collapses them during browsing", "severity": "low", "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
35
- "_hjRecordingEnabled": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar cookie indicating that session recording has been activated for the current user", "severity": "medium", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
36
- "_hjRecordingLastActivity": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar cookie tracking the last user interaction time during session recording for idle detection", "severity": "low", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
37
- "_hjSessionUser_*": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Identifies the first session of a new user and persists the Hotjar user ID across sessions", "severity": "medium", "pattern": true, "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
38
- "_hjSession_*": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Holds current session data including whether the user is in a sample for feedback and session recording", "severity": "medium", "pattern": true, "lifetime": "30 minutes", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
39
- "_hjShownFeedbackMessage": { "company": "Hotjar", "service": "Hotjar Feedback", "category": "session_recording", "description": "Hotjar cookie preventing the incoming feedback widget from re-appearing after being shown", "severity": "low", "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
40
- "_hjTLDTest": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar test cookie to determine the most general cookie domain path to use instead of page hostname", "severity": "low", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
41
- "_hjViewportId": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar cookie storing the viewport ID for heatmap viewport-relative coordinate mapping", "severity": "low", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
42
- "_hjid": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Persists the Hotjar user ID unique to the site to ensure behavior in subsequent visits is attributed to the same user", "severity": "medium", "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
43
- "_hlio_uid": { "company": "Highlight.io", "service": "Highlight Session Replay", "category": "session_recording", "description": "Highlight.io session replay visitor identifier for recording complete DOM snapshots and user interactions", "severity": "high", "lifetime": "1 year", "docs_url": "https://www.highlight.io/privacy" },
44
- "_hp2_id.*": { "company": "Heap", "service": "Heap Analytics", "category": "session_recording", "description": "Stores the Heap Analytics user identity for session recording and event tracking", "severity": "medium", "pattern": true, "lifetime": "13 months", "docs_url": "https://www.heap.io/privacy" },
45
- "_hp2_ses_props.*": { "company": "Heap", "service": "Heap Analytics", "category": "session_recording", "description": "Stores Heap session properties for correlating events within a single visit", "severity": "medium", "pattern": true, "lifetime": "30 minutes", "docs_url": "https://www.heap.io/privacy" },
46
- "_lo_cid": { "company": "Lucky Orange", "service": "Lucky Orange", "category": "session_recording", "description": "Lucky Orange campaign identifier for attributing session recordings to traffic sources", "severity": "medium", "lifetime": "2 years", "docs_url": "https://www.luckyorange.com/privacy" },
47
- "_lo_uid": { "company": "Lucky Orange", "service": "Lucky Orange", "category": "session_recording", "description": "Unique visitor identifier for Lucky Orange heatmaps and session recordings", "severity": "medium", "lifetime": "2 years", "docs_url": "https://www.luckyorange.com/privacy.php" },
48
- "_lo_v": { "company": "Lucky Orange", "service": "Lucky Orange", "category": "session_recording", "description": "Lucky Orange visitor identifier for heatmap, session recording, and form analytics", "severity": "medium", "lifetime": "2 years", "docs_url": "https://www.luckyorange.com/privacy" },
49
- "_pendo_*": { "company": "Pendo", "service": "Pendo Product Analytics", "category": "session_recording", "description": "Pendo product analytics cookie for tracking feature usage, user behavior, and in-app guide interactions", "severity": "high", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.pendo.io/legal/privacy-policy/" },
50
- "_sentry_replay_id": { "company": "Sentry", "service": "Sentry Session Replay", "category": "session_recording", "description": "Sentry session replay identifier — error monitoring tool that now records complete DOM snapshots capturing everything the user types and sees", "severity": "critical", "lifetime": "session", "docs_url": "https://sentry.io/privacy/" },
51
- "_sp_*": { "company": "Smartlook", "service": "Smartlook Session Recording", "category": "session_recording", "description": "Smartlook session recording and heatmap analytics cookie for visitor identification", "severity": "medium", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.smartlook.com/privacy/" },
52
- "_uetvid_exp": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Microsoft Clarity UET video experiment cookie for A/B testing session recording features", "severity": "medium", "lifetime": "session", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
53
- "_zipy_uid": { "company": "Zipy", "service": "Zipy Session Replay", "category": "session_recording", "description": "Zipy session replay user identifier — persists across sessions to link recorded browsing sessions to individual visitors", "severity": "high", "lifetime": "1 year", "docs_url": "https://www.zipy.ai/privacy-policy" },
54
- "amplitude_replay_*": { "company": "Amplitude", "service": "Amplitude Session Replay", "category": "session_recording", "description": "Amplitude session replay cookie capturing complete DOM snapshots alongside product analytics events", "severity": "critical", "pattern": true, "lifetime": "session", "docs_url": "https://amplitude.com/privacy" },
55
- "appcues_*": { "company": "Appcues", "service": "Appcues Product Tours", "category": "session_recording", "description": "Appcues product adoption cookie tracking user progress through onboarding flows and feature tours", "severity": "medium", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.appcues.com/legal/privacy" },
56
- "auryc_*": { "company": "Auryc", "service": "Auryc Experience Analytics", "category": "session_recording", "description": "Auryc experience intelligence cookie for session replay and revenue impact analytics", "severity": "high", "pattern": true, "lifetime": "session", "docs_url": "https://www.auryc.com/privacy-policy/" },
57
- "clicktale_*": { "company": "Contentsquare", "service": "ClickTale (Contentsquare) Recording", "category": "session_recording", "description": "ClickTale (now Contentsquare) session recording cookie for heatmap and behavior analytics", "severity": "high", "pattern": true, "lifetime": "1 year", "docs_url": "https://docs.contentsquare.com/uxa-en/#cookies" },
58
- "datadog_rum_*": { "company": "Datadog", "service": "Datadog RUM Session Replay", "category": "session_recording", "description": "Datadog Real User Monitoring cookie for session replay capture and performance analytics", "severity": "high", "pattern": true, "lifetime": "session", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
59
- "decibel_*": { "company": "Medallia", "service": "Decibel (Medallia) Recording", "category": "session_recording", "description": "Decibel Insight (Medallia) session recording cookie for digital experience scoring and analytics", "severity": "high", "pattern": true, "lifetime": "session", "docs_url": "https://www.medallia.com/privacy-policy/" },
60
- "dynatrace_*": { "company": "Dynatrace", "service": "Dynatrace RUM Recording", "category": "session_recording", "description": "Dynatrace real user monitoring cookie for session replay and performance analytics", "severity": "medium", "pattern": true, "lifetime": "session", "docs_url": "https://www.dynatrace.com/company/trust-center/privacy/" },
61
- "fs_uid": { "company": "FullStory", "service": "FullStory", "category": "session_recording", "description": "Identifies the user across FullStory session recordings for replay and analytics", "severity": "medium", "lifetime": "1 year", "docs_url": "https://www.fullstory.com/legal/privacy-policy/" },
62
- "is_returning": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "description": "Indicates whether the visitor is a returning user for Crazy Egg analytics", "severity": "medium", "lifetime": "5 years", "docs_url": "https://www.crazyegg.com/privacy" },
63
- "logrocket_*": { "company": "LogRocket", "service": "LogRocket Session Replay", "category": "session_recording", "description": "LogRocket session replay cookie for frontend error reproduction and user experience debugging", "severity": "high", "pattern": true, "lifetime": "1 year", "docs_url": "https://logrocket.com/privacy/" },
64
- "mf_*": { "company": "Mouseflow", "service": "Mouseflow", "category": "session_recording", "description": "Mouseflow visitor and session tracking cookies for session replay and behavior analytics", "severity": "medium", "pattern": true, "lifetime": "90 days", "docs_url": "https://mouseflow.com/privacy/" },
65
- "mp_replay_*": { "company": "Mixpanel", "service": "Mixpanel Session Replay", "category": "session_recording", "description": "Mixpanel session replay cookie recording user sessions alongside event-based product analytics", "severity": "critical", "pattern": true, "lifetime": "session", "docs_url": "https://mixpanel.com/legal/privacy-policy/" },
66
- "openreplay_*": { "company": "OpenReplay", "service": "OpenReplay Session Recording", "category": "session_recording", "description": "OpenReplay open-source session recording cookie for visitor replay and debugging", "severity": "medium", "pattern": true, "lifetime": "session", "docs_url": "https://openreplay.com/privacy" },
67
- "plerdy_*": { "company": "Plerdy", "service": "Plerdy Session Recording", "category": "session_recording", "description": "Plerdy CRO platform cookie for session recording, heatmaps, and click tracking analytics", "severity": "high", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.plerdy.com/privacy-policy/" },
68
- "posthog_*": { "company": "PostHog", "service": "PostHog Session Recording", "category": "session_recording", "description": "PostHog product analytics session recording cookie for replay and feature flag evaluation", "severity": "medium", "pattern": true, "lifetime": "1 year", "docs_url": "https://posthog.com/privacy" },
69
- "qm_*": { "company": "Quantum Metric", "service": "Quantum Metric Recording", "category": "session_recording", "description": "Quantum Metric continuous product design cookie for session replay and experience analytics", "severity": "high", "pattern": true, "lifetime": "session", "docs_url": "https://www.quantummetric.com/legal/privacy-policy/" },
70
- "rrweb_*": { "company": "rrweb", "service": "rrweb Open Source Recording", "category": "session_recording", "description": "rrweb open-source session recording cookie for web interaction replay and debugging", "severity": "medium", "pattern": true, "lifetime": "session", "docs_url": "https://www.rrweb.io/" },
71
- "sessionstack_*": { "company": "SessionStack", "service": "SessionStack Recording", "category": "session_recording", "description": "SessionStack session recording cookie for digital experience analytics and error reproduction", "severity": "high", "pattern": true, "lifetime": "session", "docs_url": "https://www.sessionstack.com/privacy-policy/" },
72
- "sprig_*": { "company": "Sprig", "service": "Sprig In-Product Research", "category": "session_recording", "description": "Sprig in-product survey and session replay cookie for capturing user sessions alongside behavioral surveys", "severity": "high", "pattern": true, "lifetime": "1 year", "docs_url": "https://sprig.com/privacy-policy" },
73
- "walkme_*": { "company": "WalkMe (SAP)", "service": "WalkMe Digital Adoption", "category": "session_recording", "description": "WalkMe digital adoption platform cookie tracking user interactions with guided tours and software workflows", "severity": "high", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.walkme.com/privacy-policy/" },
74
- "wf_recording_*": { "company": "Mouseflow", "service": "Mouseflow", "category": "session_recording", "description": "Mouseflow session recording flag cookie indicating the current session is being recorded", "severity": "medium", "pattern": true, "lifetime": "session", "docs_url": "https://mouseflow.com/privacy/" },
75
- "whatfix_*": { "company": "Whatfix", "service": "Whatfix Digital Adoption", "category": "session_recording", "description": "Whatfix digital adoption platform cookie tracking user interactions with guided walkthroughs and self-help widgets", "severity": "high", "pattern": true, "lifetime": "1 year", "docs_url": "https://whatfix.com/privacy-policy/" }
6
+ "ANONCHK": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Indicates whether MUID is transferred to ANID, used for advertising purposes by Microsoft", "consent_burden": "contested", "lifetime": "10 minutes", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
7
+ "CLID": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Identifies the first time Clarity saw this user on any site using Clarity", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
8
+ "SM": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Synchronizes the MUID across Microsoft domains for cross-site analytics", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
9
+ "__insp_uid": { "company": "Inspectlet", "service": "Inspectlet", "category": "session_recording", "description": "Unique Inspectlet user identifier for session replay and visitor segmentation", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://www.inspectlet.com/legal" },
10
+ "__insp_wid": { "company": "Inspectlet", "service": "Inspectlet", "category": "session_recording", "description": "Inspectlet session recording window identifier for heatmap and funnel analytics", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://www.inspectlet.com/legal" },
11
+ "__uf_*": { "company": "Userflow", "service": "Userflow", "category": "session_recording", "description": "Userflow product tour and onboarding cookie for tracking user progress through guided flows", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://userflow.com/privacy" },
12
+ "_browsee_id": { "company": "Browsee", "service": "Browsee Session Replay", "category": "session_recording", "description": "Browsee session recording visitor identifier for persistent session replay tracking across visits", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.browsee.io/privacy-policy" },
13
+ "_capturly_id": { "company": "Capturly", "service": "Capturly Session Recording", "category": "session_recording", "description": "Capturly visitor identifier for session recording, heatmap, and form analytics tracking", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://capturly.com/privacy-policy" },
14
+ "_ce.clock_data": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "description": "Crazy Egg session timing cookie for accurate time-on-page measurement in recordings", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://www.crazyegg.com/privacy" },
15
+ "_ce.clock_event": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "description": "Crazy Egg clock synchronization cookie for aligning events in session recordings", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://www.crazyegg.com/privacy" },
16
+ "_ce.s": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "description": "Crazy Egg session recording cookie for heatmap and user session replay tracking", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.crazyegg.com/privacy" },
17
+ "_ceir": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "description": "Tracks whether a visitor is a returning user across Crazy Egg recording sessions", "consent_burden": "contested", "lifetime": "5 years", "docs_url": "https://www.crazyegg.com/privacy" },
18
+ "_clck": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Persists the Clarity user ID and preferences for session replay and heatmap analytics", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
19
+ "_clsk": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Connects multiple page views by a user into a single Clarity session recording", "consent_burden": "contested", "lifetime": "24 hours", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
20
+ "_cs_c": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "description": "Contentsquare consent state cookie recording user's consent for session recording", "consent_burden": "minimal", "lifetime": "13 months", "docs_url": "https://contentsquare.com/privacy/" },
21
+ "_cs_ex": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "description": "Contentsquare exclusion cookie marking users who opted out of session recording", "consent_burden": "minimal", "lifetime": "30 days", "docs_url": "https://docs.contentsquare.com/uxa-en/#cookies" },
22
+ "_cs_id": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "description": "Contentsquare visitor identifier cookie for session replay and UX analytics", "consent_burden": "contested", "lifetime": "13 months", "docs_url": "https://contentsquare.com/privacy/" },
23
+ "_cs_mk_aa": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "description": "Contentsquare Adobe Analytics integration cookie for cross-platform analytics correlation", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://contentsquare.com/privacy/" },
24
+ "_cs_s": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "description": "Contentsquare session cookie for grouping page views into sessions for analysis", "consent_burden": "contested", "lifetime": "30 minutes", "docs_url": "https://contentsquare.com/privacy/" },
25
+ "_dd_replay_*": { "company": "Datadog", "service": "Datadog Session Replay", "category": "session_recording", "description": "Datadog session replay cookie — infrastructure monitoring tool recording browser sessions including DOM mutations and user interactions", "consent_burden": "required_strict", "pattern": true, "lifetime": "session", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
26
+ "_fs_uid": { "company": "FullSession", "service": "FullSession Recording", "category": "session_recording", "description": "FullSession visitor identifier for session recording and interaction analytics", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.fullsession.io/privacy-policy" },
27
+ "_gcl_gs": { "company": "Google", "service": "Google Optimize", "category": "session_recording", "description": "Google Optimize session experiment cookie for maintaining A/B test variation assignment during a session", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://developers.google.com/optimize" },
28
+ "_gs_*": { "company": "Gainsight", "service": "Gainsight PX", "category": "session_recording", "description": "Gainsight PX product experience cookie for tracking feature adoption and user engagement patterns", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.gainsight.com/privacy/" },
29
+ "_hjAbsoluteSessionInProgress": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Detects the first pageview session of a user to control total session data tracking", "consent_burden": "contested", "lifetime": "30 minutes", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
30
+ "_hjClosedSurveyInvites": { "company": "Hotjar", "service": "Hotjar Feedback", "category": "session_recording", "description": "Hotjar cookie preventing a dismissed survey from reappearing to the same visitor", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
31
+ "_hjCookieTest": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar test cookie to verify the browser accepts cookies before setting tracking cookies", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
32
+ "_hjDonePolls": { "company": "Hotjar", "service": "Hotjar Feedback", "category": "session_recording", "description": "Hotjar cookie preventing completed polls from being shown again to the same user", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
33
+ "_hjFirstSeen": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar cookie identifying the first session of a new user for initial pageview event tracking", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
34
+ "_hjMinimizedPolls": { "company": "Hotjar", "service": "Hotjar Feedback", "category": "session_recording", "description": "Hotjar cookie keeping polls minimized after the user collapses them during browsing", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
35
+ "_hjRecordingEnabled": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar cookie indicating that session recording has been activated for the current user", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
36
+ "_hjRecordingLastActivity": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar cookie tracking the last user interaction time during session recording for idle detection", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
37
+ "_hjSessionUser_*": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Identifies the first session of a new user and persists the Hotjar user ID across sessions", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
38
+ "_hjSession_*": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Holds current session data including whether the user is in a sample for feedback and session recording", "consent_burden": "contested", "pattern": true, "lifetime": "30 minutes", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
39
+ "_hjShownFeedbackMessage": { "company": "Hotjar", "service": "Hotjar Feedback", "category": "session_recording", "description": "Hotjar cookie preventing the incoming feedback widget from re-appearing after being shown", "consent_burden": "minimal", "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
40
+ "_hjTLDTest": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar test cookie to determine the most general cookie domain path to use instead of page hostname", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
41
+ "_hjViewportId": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Hotjar cookie storing the viewport ID for heatmap viewport-relative coordinate mapping", "consent_burden": "minimal", "lifetime": "session", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248" },
42
+ "_hjid": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "description": "Persists the Hotjar user ID unique to the site to ensure behavior in subsequent visits is attributed to the same user", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
43
+ "_hlio_uid": { "company": "Highlight.io", "service": "Highlight Session Replay", "category": "session_recording", "description": "Highlight.io session replay visitor identifier for recording complete DOM snapshots and user interactions", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.highlight.io/privacy" },
44
+ "_hp2_id.*": { "company": "Heap", "service": "Heap Analytics", "category": "session_recording", "description": "Stores the Heap Analytics user identity for session recording and event tracking", "consent_burden": "contested", "pattern": true, "lifetime": "13 months", "docs_url": "https://www.heap.io/privacy" },
45
+ "_hp2_ses_props.*": { "company": "Heap", "service": "Heap Analytics", "category": "session_recording", "description": "Stores Heap session properties for correlating events within a single visit", "consent_burden": "contested", "pattern": true, "lifetime": "30 minutes", "docs_url": "https://www.heap.io/privacy" },
46
+ "_lo_cid": { "company": "Lucky Orange", "service": "Lucky Orange", "category": "session_recording", "description": "Lucky Orange campaign identifier for attributing session recordings to traffic sources", "consent_burden": "contested", "lifetime": "2 years", "docs_url": "https://www.luckyorange.com/privacy" },
47
+ "_lo_uid": { "company": "Lucky Orange", "service": "Lucky Orange", "category": "session_recording", "description": "Unique visitor identifier for Lucky Orange heatmaps and session recordings", "consent_burden": "contested", "lifetime": "2 years", "docs_url": "https://www.luckyorange.com/privacy.php" },
48
+ "_lo_v": { "company": "Lucky Orange", "service": "Lucky Orange", "category": "session_recording", "description": "Lucky Orange visitor identifier for heatmap, session recording, and form analytics", "consent_burden": "contested", "lifetime": "2 years", "docs_url": "https://www.luckyorange.com/privacy" },
49
+ "_pendo_*": { "company": "Pendo", "service": "Pendo Product Analytics", "category": "session_recording", "description": "Pendo product analytics cookie for tracking feature usage, user behavior, and in-app guide interactions", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.pendo.io/legal/privacy-policy/" },
50
+ "_sentry_replay_id": { "company": "Sentry", "service": "Sentry Session Replay", "category": "session_recording", "description": "Sentry session replay identifier — error monitoring tool that now records complete DOM snapshots capturing everything the user types and sees", "consent_burden": "required_strict", "lifetime": "session", "docs_url": "https://sentry.io/privacy/" },
51
+ "_sp_*": { "company": "Smartlook", "service": "Smartlook Session Recording", "category": "session_recording", "description": "Smartlook session recording and heatmap analytics cookie for visitor identification", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.smartlook.com/privacy/" },
52
+ "_uetvid_exp": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "description": "Microsoft Clarity UET video experiment cookie for A/B testing session recording features", "consent_burden": "contested", "lifetime": "session", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
53
+ "_zipy_uid": { "company": "Zipy", "service": "Zipy Session Replay", "category": "session_recording", "description": "Zipy session replay user identifier — persists across sessions to link recorded browsing sessions to individual visitors", "consent_burden": "required", "lifetime": "1 year", "docs_url": "https://www.zipy.ai/privacy-policy" },
54
+ "amplitude_replay_*": { "company": "Amplitude", "service": "Amplitude Session Replay", "category": "session_recording", "description": "Amplitude session replay cookie capturing complete DOM snapshots alongside product analytics events", "consent_burden": "required_strict", "pattern": true, "lifetime": "session", "docs_url": "https://amplitude.com/privacy" },
55
+ "appcues_*": { "company": "Appcues", "service": "Appcues Product Tours", "category": "session_recording", "description": "Appcues product adoption cookie tracking user progress through onboarding flows and feature tours", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.appcues.com/legal/privacy" },
56
+ "auryc_*": { "company": "Auryc", "service": "Auryc Experience Analytics", "category": "session_recording", "description": "Auryc experience intelligence cookie for session replay and revenue impact analytics", "consent_burden": "required", "pattern": true, "lifetime": "session", "docs_url": "https://www.auryc.com/privacy-policy/" },
57
+ "clicktale_*": { "company": "Contentsquare", "service": "ClickTale (Contentsquare) Recording", "category": "session_recording", "description": "ClickTale (now Contentsquare) session recording cookie for heatmap and behavior analytics", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://docs.contentsquare.com/uxa-en/#cookies" },
58
+ "datadog_rum_*": { "company": "Datadog", "service": "Datadog RUM Session Replay", "category": "session_recording", "description": "Datadog Real User Monitoring cookie for session replay capture and performance analytics", "consent_burden": "required", "pattern": true, "lifetime": "session", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
59
+ "decibel_*": { "company": "Medallia", "service": "Decibel (Medallia) Recording", "category": "session_recording", "description": "Decibel Insight (Medallia) session recording cookie for digital experience scoring and analytics", "consent_burden": "required", "pattern": true, "lifetime": "session", "docs_url": "https://www.medallia.com/privacy-policy/" },
60
+ "dynatrace_*": { "company": "Dynatrace", "service": "Dynatrace RUM Recording", "category": "session_recording", "description": "Dynatrace real user monitoring cookie for session replay and performance analytics", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.dynatrace.com/company/trust-center/privacy/" },
61
+ "fs_uid": { "company": "FullStory", "service": "FullStory", "category": "session_recording", "description": "Identifies the user across FullStory session recordings for replay and analytics", "consent_burden": "contested", "lifetime": "1 year", "docs_url": "https://www.fullstory.com/legal/privacy-policy/" },
62
+ "is_returning": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "description": "Indicates whether the visitor is a returning user for Crazy Egg analytics", "consent_burden": "contested", "lifetime": "5 years", "docs_url": "https://www.crazyegg.com/privacy" },
63
+ "logrocket_*": { "company": "LogRocket", "service": "LogRocket Session Replay", "category": "session_recording", "description": "LogRocket session replay cookie for frontend error reproduction and user experience debugging", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://logrocket.com/privacy/" },
64
+ "mf_*": { "company": "Mouseflow", "service": "Mouseflow", "category": "session_recording", "description": "Mouseflow visitor and session tracking cookies for session replay and behavior analytics", "consent_burden": "contested", "pattern": true, "lifetime": "90 days", "docs_url": "https://mouseflow.com/privacy/" },
65
+ "mp_replay_*": { "company": "Mixpanel", "service": "Mixpanel Session Replay", "category": "session_recording", "description": "Mixpanel session replay cookie recording user sessions alongside event-based product analytics", "consent_burden": "required_strict", "pattern": true, "lifetime": "session", "docs_url": "https://mixpanel.com/legal/privacy-policy/" },
66
+ "openreplay_*": { "company": "OpenReplay", "service": "OpenReplay Session Recording", "category": "session_recording", "description": "OpenReplay open-source session recording cookie for visitor replay and debugging", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://openreplay.com/privacy" },
67
+ "plerdy_*": { "company": "Plerdy", "service": "Plerdy Session Recording", "category": "session_recording", "description": "Plerdy CRO platform cookie for session recording, heatmaps, and click tracking analytics", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.plerdy.com/privacy-policy/" },
68
+ "posthog_*": { "company": "PostHog", "service": "PostHog Session Recording", "category": "session_recording", "description": "PostHog product analytics session recording cookie for replay and feature flag evaluation", "consent_burden": "contested", "pattern": true, "lifetime": "1 year", "docs_url": "https://posthog.com/privacy" },
69
+ "qm_*": { "company": "Quantum Metric", "service": "Quantum Metric Recording", "category": "session_recording", "description": "Quantum Metric continuous product design cookie for session replay and experience analytics", "consent_burden": "required", "pattern": true, "lifetime": "session", "docs_url": "https://www.quantummetric.com/legal/privacy-policy/" },
70
+ "rrweb_*": { "company": "rrweb", "service": "rrweb Open Source Recording", "category": "session_recording", "description": "rrweb open-source session recording cookie for web interaction replay and debugging", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://www.rrweb.io/" },
71
+ "sessionstack_*": { "company": "SessionStack", "service": "SessionStack Recording", "category": "session_recording", "description": "SessionStack session recording cookie for digital experience analytics and error reproduction", "consent_burden": "required", "pattern": true, "lifetime": "session", "docs_url": "https://www.sessionstack.com/privacy-policy/" },
72
+ "sprig_*": { "company": "Sprig", "service": "Sprig In-Product Research", "category": "session_recording", "description": "Sprig in-product survey and session replay cookie for capturing user sessions alongside behavioral surveys", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://sprig.com/privacy-policy" },
73
+ "walkme_*": { "company": "WalkMe (SAP)", "service": "WalkMe Digital Adoption", "category": "session_recording", "description": "WalkMe digital adoption platform cookie tracking user interactions with guided tours and software workflows", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://www.walkme.com/privacy-policy/" },
74
+ "wf_recording_*": { "company": "Mouseflow", "service": "Mouseflow", "category": "session_recording", "description": "Mouseflow session recording flag cookie indicating the current session is being recorded", "consent_burden": "contested", "pattern": true, "lifetime": "session", "docs_url": "https://mouseflow.com/privacy/" },
75
+ "whatfix_*": { "company": "Whatfix", "service": "Whatfix Digital Adoption", "category": "session_recording", "description": "Whatfix digital adoption platform cookie tracking user interactions with guided walkthroughs and self-help widgets", "consent_burden": "required", "pattern": true, "lifetime": "1 year", "docs_url": "https://whatfix.com/privacy-policy/" }
76
76
  },
77
77
  "domains": {
78
- "api.livesession.io": { "company": "LiveSession", "service": "LiveSession API", "category": "session_recording", "severity": "high", "docs_url": "https://livesession.io/privacy-policy/" },
79
- "api.luckyorange.com": { "company": "Lucky Orange", "service": "Lucky Orange API", "category": "session_recording", "severity": "medium", "docs_url": "https://www.luckyorange.com/privacy.php" },
80
- "api.mouseflow.com": { "company": "Mouseflow", "service": "Mouseflow API", "category": "session_recording", "severity": "high", "docs_url": "https://mouseflow.com/privacy/" },
81
- "app.browsee.io": { "company": "Browsee", "service": "Browsee App", "category": "session_recording", "severity": "high", "docs_url": "https://www.browsee.io/privacy-policy" },
82
- "app.capturly.com": { "company": "Capturly", "service": "Capturly App", "category": "session_recording", "severity": "high", "docs_url": "https://capturly.com/privacy-policy" },
83
- "app.fullsession.io": { "company": "FullSession", "service": "FullSession App", "category": "session_recording", "severity": "high", "docs_url": "https://www.fullsession.io/privacy-policy" },
84
- "app.heatmap.com": { "company": "Heatmap.com", "service": "Heatmap.com App", "category": "session_recording", "severity": "high", "docs_url": "https://www.heatmap.com/privacy-policy" },
85
- "app.highlight.io": { "company": "Highlight.io", "service": "Highlight Platform", "category": "session_recording", "severity": "high", "docs_url": "https://www.highlight.io/privacy" },
86
- "app.pendo.io": { "company": "Pendo", "service": "Pendo Platform", "category": "session_recording", "severity": "high", "docs_url": "https://www.pendo.io/legal/privacy-policy/" },
87
- "app.plerdy.com": { "company": "Plerdy", "service": "Plerdy Platform", "category": "session_recording", "severity": "high", "docs_url": "https://www.plerdy.com/privacy-policy/" },
88
- "app.posthog.com": { "company": "PostHog", "service": "PostHog Analytics", "category": "session_recording", "severity": "medium", "docs_url": "https://posthog.com/privacy" },
89
- "app.reactflow.com": { "company": "Reactflow", "service": "Reactflow Platform", "category": "session_recording", "severity": "high", "docs_url": "https://www.reactflow.com/privacy-policy" },
90
- "app.sessionrewind.com": { "company": "SessionRewind", "service": "SessionRewind App", "category": "session_recording", "severity": "high", "docs_url": "https://www.sessionrewind.com/privacy-policy" },
91
- "app.webmaxy.co": { "company": "WebMaxy", "service": "WebMaxy App", "category": "session_recording", "severity": "high", "docs_url": "https://www.webmaxy.co/privacy-policy" },
92
- "app.zipy.ai": { "company": "Zipy", "service": "Zipy Platform", "category": "session_recording", "severity": "high", "docs_url": "https://www.zipy.ai/privacy-policy" },
93
- "bam.nr-data.net/replay": { "company": "New Relic", "service": "New Relic Session Traces", "category": "session_recording", "severity": "critical", "note": "APM tool that captures browser session traces — records page load timings, JavaScript errors, and user interaction sequences. Can capture sensitive URL parameters and form data in error traces.", "docs_url": "https://newrelic.com/termsandconditions/privacy" },
94
- "c.contentsquare.net": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "severity": "high", "docs_url": "https://docs.contentsquare.com/uxa-en/#cookies" },
95
- "cdn.amplitude.com/replay": { "company": "Amplitude", "service": "Amplitude Session Replay", "category": "session_recording", "severity": "critical", "note": "Product analytics platform with session replay — captures complete DOM snapshots and user interactions alongside event analytics data", "docs_url": "https://amplitude.com/privacy" },
96
- "cdn.appcues.com": { "company": "Appcues", "service": "Appcues Product Adoption", "category": "session_recording", "severity": "high", "note": "Product adoption platform — tracks user behavior patterns and records interactions for onboarding flow optimization", "docs_url": "https://www.appcues.com/legal/privacy" },
97
- "cdn.auryc.com": { "company": "Auryc", "service": "Auryc Experience Analytics CDN", "category": "session_recording", "severity": "high", "docs_url": "https://www.auryc.com/privacy-policy/" },
98
- "cdn.browsee.io": { "company": "Browsee", "service": "Browsee Session Replay", "category": "session_recording", "severity": "high", "note": "Session replay tool — records mouse movements, clicks, scrolls, and page interactions. Can capture form input data including passwords if not properly masked.", "docs_url": "https://www.browsee.io/privacy-policy" },
99
- "cdn.capturly.com": { "company": "Capturly", "service": "Capturly Session Recording", "category": "session_recording", "severity": "high", "note": "Session recording and heatmap tool — captures mouse movements, clicks, scrolls, and form interactions for visual analytics playback", "docs_url": "https://capturly.com/privacy-policy" },
100
- "cdn.clarity.ms/collect": { "company": "Microsoft", "service": "Microsoft Clarity Data", "category": "session_recording", "severity": "medium", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
101
- "cdn.clicktale.net": { "company": "Contentsquare", "service": "ClickTale (Contentsquare) CDN", "category": "session_recording", "severity": "high", "docs_url": "https://docs.contentsquare.com/uxa-en/#cookies" },
102
- "cdn.datadog-agent.com": { "company": "Datadog", "service": "Datadog RUM Session Replay", "category": "session_recording", "severity": "high", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
103
- "cdn.decibelinsight.net": { "company": "Medallia", "service": "Decibel (Medallia) CDN", "category": "session_recording", "severity": "high", "docs_url": "https://www.medallia.com/privacy-policy/" },
104
- "cdn.dynatrace.com/replay": { "company": "Dynatrace", "service": "Dynatrace Session Replay", "category": "session_recording", "severity": "critical", "note": "Enterprise APM with session replay — captures complete browser sessions including user actions, DOM state, and network calls. DevOps teams enable this broadly without privacy review.", "docs_url": "https://www.dynatrace.com/company/trust-center/privacy/" },
105
- "cdn.fullsession.io": { "company": "FullSession", "service": "FullSession Recording", "category": "session_recording", "severity": "high", "note": "Session recording platform — captures complete user sessions including heatmaps, click maps, and interaction recordings with form analytics", "docs_url": "https://www.fullsession.io/privacy-policy" },
106
- "cdn.gainsight.com/px": { "company": "Gainsight", "service": "Gainsight PX Product Analytics", "category": "session_recording", "severity": "high", "note": "Customer success product analytics — tracks feature adoption, user engagement, and session behavior for retention analytics", "docs_url": "https://www.gainsight.com/privacy/" },
107
- "cdn.glassbox.com": { "company": "Glassbox", "service": "Glassbox Session Replay", "category": "session_recording", "severity": "high", "docs_url": "https://www.glassbox.com/privacy-policy/" },
108
- "cdn.heatmap.com": { "company": "Heatmap.com", "service": "Heatmap.com Revenue Analytics", "category": "session_recording", "severity": "high", "note": "Heatmap tool that ties clicks and scrolls to revenue data — shows exactly which page elements drive purchases, tracking complete user journeys through checkout", "docs_url": "https://www.heatmap.com/privacy-policy" },
109
- "cdn.highlight.io": { "company": "Highlight.io", "service": "Highlight Session Replay", "category": "session_recording", "severity": "high", "note": "Open-source session replay — records complete DOM snapshots, network requests, console logs, and user interactions. Full-stack observability means your entire browsing session is captured.", "docs_url": "https://www.highlight.io/privacy" },
110
- "cdn.inspectlet.com": { "company": "Inspectlet", "service": "Inspectlet Session Recording", "category": "session_recording", "severity": "high", "note": "Session recording tool that captures eye-tracking heatmaps, mouse movement recordings, and form analytics. Can record sensitive data in form fields if not masked.", "docs_url": "https://www.inspectlet.com/legal" },
111
- "cdn.livesession.io": { "company": "LiveSession", "service": "LiveSession Recording CDN", "category": "session_recording", "severity": "high", "docs_url": "https://livesession.io/privacy-policy/" },
112
- "cdn.logrocket.com": { "company": "LogRocket", "service": "LogRocket Session Replay", "category": "session_recording", "severity": "critical", "note": "Frontend monitoring with session replay — captures full DOM snapshots, Redux state, network requests, and console logs. Records everything a developer would see in DevTools.", "docs_url": "https://logrocket.com/privacy/" },
113
- "cdn.logrocket.io": { "company": "LogRocket", "service": "LogRocket CDN", "category": "session_recording", "severity": "critical", "docs_url": "https://logrocket.com/privacy/" },
114
- "cdn.luckyorange.com": { "company": "Lucky Orange", "service": "Lucky Orange CDN", "category": "session_recording", "severity": "medium", "docs_url": "https://www.luckyorange.com/privacy.php" },
115
- "cdn.mixpanel.com/replay": { "company": "Mixpanel", "service": "Mixpanel Session Replay", "category": "session_recording", "severity": "critical", "note": "Product analytics with session replay — records user sessions alongside event tracking for behavior analysis and debugging", "docs_url": "https://mixpanel.com/legal/privacy-policy/" },
116
- "cdn.mouseflow.com": { "company": "Mouseflow", "service": "Mouseflow Session Replay", "category": "session_recording", "severity": "high", "docs_url": "https://mouseflow.com/privacy/" },
117
- "cdn.mouseflow.com/js": { "company": "Mouseflow", "service": "Mouseflow JavaScript SDK", "category": "session_recording", "severity": "high", "docs_url": "https://mouseflow.com/privacy/" },
118
- "cdn.mouseflow.com/projects": { "company": "Mouseflow", "service": "Mouseflow Project Config", "category": "session_recording", "severity": "high", "docs_url": "https://mouseflow.com/privacy/" },
119
- "cdn.nextools.io": { "company": "Nextools", "service": "Nextools Analytics Recording", "category": "session_recording", "severity": "high", "note": "Web analytics with session recording — tracks user behavior including heatmaps, scroll depth, and session replay for conversion optimization", "docs_url": "https://nextools.io/privacy" },
120
- "cdn.openreplay.com": { "company": "OpenReplay", "service": "OpenReplay Session Recording", "category": "session_recording", "severity": "medium", "docs_url": "https://openreplay.com/privacy" },
121
- "cdn.pendo.io": { "company": "Pendo", "service": "Pendo Product Analytics", "category": "session_recording", "severity": "high", "note": "Product analytics with session replay — captures user interactions, feature usage, and page navigation for product decisions", "docs_url": "https://www.pendo.io/legal/privacy-policy/" },
122
- "cdn.plerdy.com": { "company": "Plerdy", "service": "Plerdy Session Recording", "category": "session_recording", "severity": "high", "note": "All-in-one CRO tool with session recording — captures heatmaps, click maps, scroll depth, and complete session replays for conversion optimization", "docs_url": "https://www.plerdy.com/privacy-policy/" },
123
- "cdn.quantum-metric.com": { "company": "Quantum Metric", "service": "Quantum Metric CDN", "category": "session_recording", "severity": "high", "docs_url": "https://www.quantummetric.com/legal/privacy-policy/" },
124
- "cdn.reactflow.com": { "company": "Reactflow", "service": "Reactflow Session Recording", "category": "session_recording", "severity": "high", "note": "Session recording tool — records complete user interactions as video-like playback including mouse movements, clicks, scrolling, and form interactions", "docs_url": "https://www.reactflow.com/privacy-policy" },
125
- "cdn.replay.io": { "company": "Replay.io", "service": "Replay.io Session Recording", "category": "session_recording", "severity": "high", "docs_url": "https://www.replay.io/privacy" },
126
- "cdn.sentry.io/replay": { "company": "Sentry", "service": "Sentry Session Replay", "category": "session_recording", "severity": "critical", "note": "Error monitoring tool that now records complete DOM snapshots of user sessions. Captures EVERYTHING the user types and sees, including sensitive form data, unless developers manually mask fields. Shipped as opt-in but enabled broadly.", "docs_url": "https://sentry.io/privacy/" },
127
- "cdn.sessionrewind.com": { "company": "SessionRewind", "service": "SessionRewind Recording", "category": "session_recording", "severity": "high", "note": "Session replay tool — records user sessions as video-like playbacks, capturing all interactions including typing, scrolling, and clicking", "docs_url": "https://www.sessionrewind.com/privacy-policy" },
128
- "cdn.sessionstack.com": { "company": "SessionStack", "service": "SessionStack Recording CDN", "category": "session_recording", "severity": "high", "docs_url": "https://www.sessionstack.com/privacy-policy/" },
129
- "cdn.smartlook.cloud": { "company": "Smartlook", "service": "Smartlook Cloud CDN", "category": "session_recording", "severity": "high", "docs_url": "https://www.smartlook.com/privacy-policy/" },
130
- "cdn.smartlook.com": { "company": "Smartlook (Cisco)", "service": "Smartlook Session Recording", "category": "session_recording", "severity": "high", "note": "Session recording and analytics — records user sessions as video with event-based analytics. Now owned by Cisco through acquisition.", "docs_url": "https://www.smartlook.com/privacy-policy/" },
131
- "cdn.sprig.com": { "company": "Sprig", "service": "Sprig In-Product Surveys", "category": "session_recording", "severity": "high", "note": "In-product survey and session replay tool — captures user sessions and triggers surveys based on behavior patterns", "docs_url": "https://sprig.com/privacy-policy" },
132
- "cdn.usefathom.com": { "company": "Fathom Analytics", "service": "Fathom Privacy Analytics", "category": "session_recording", "severity": "low", "note": "Privacy-focused analytics — no cookies, no session recording, GDPR-compliant by design. Listed for reference as a privacy-respecting alternative.", "docs_url": "https://usefathom.com/privacy" },
133
- "cdn.userback.io": { "company": "Userback", "service": "Userback Feedback Recording", "category": "session_recording", "severity": "high", "note": "User feedback tool with session recording — captures video recordings of user sessions alongside feedback submissions", "docs_url": "https://www.userback.io/privacy" },
134
- "cdn.userpilot.io": { "company": "Userpilot", "service": "Userpilot Session Recording", "category": "session_recording", "severity": "high", "docs_url": "https://userpilot.com/privacy-policy/" },
135
- "cdn.usertesting.com": { "company": "UserTesting", "service": "UserTesting Recordings", "category": "session_recording", "severity": "high", "docs_url": "https://www.usertesting.com/privacy-center" },
136
- "cdn.uxcam.com": { "company": "UXCam", "service": "UXCam Session Replay", "category": "session_recording", "severity": "high", "docs_url": "https://uxcam.com/privacy-policy" },
137
- "cdn.uxtweak.com": { "company": "UXtweak", "service": "UXtweak Session Recording", "category": "session_recording", "severity": "medium", "docs_url": "https://www.uxtweak.com/privacy-policy/" },
138
- "cdn.walkme.com": { "company": "WalkMe (SAP)", "service": "WalkMe Digital Adoption", "category": "session_recording", "severity": "high", "note": "SAP-owned digital adoption platform — captures user behavior, session recordings, and interaction patterns for enterprise software analytics", "docs_url": "https://www.walkme.com/privacy-policy/" },
139
- "cdn.webmaxy.co": { "company": "WebMaxy", "service": "WebMaxy Session Recording", "category": "session_recording", "severity": "high", "note": "All-in-one analytics with session recording, heatmaps, and funnel analysis — captures complete user journeys and behavioral patterns", "docs_url": "https://www.webmaxy.co/privacy-policy" },
140
- "cdn.whatfix.com": { "company": "Whatfix", "service": "Whatfix Digital Adoption", "category": "session_recording", "severity": "high", "note": "Digital adoption platform with session recording — captures user interactions for product adoption analytics and guided tours", "docs_url": "https://whatfix.com/privacy-policy/" },
141
- "cdn.zipy.ai": { "company": "Zipy", "service": "Zipy Session Replay", "category": "session_recording", "severity": "high", "note": "Session replay and error tracking — records complete user sessions including DOM snapshots, network requests, and console logs. Captures everything a developer would see.", "docs_url": "https://www.zipy.ai/privacy-policy" },
142
- "clarity.ms": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "severity": "medium", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
143
- "d10lpsik1i8c69.cloudfront.net": { "company": "Lucky Orange", "service": "Lucky Orange", "category": "session_recording", "severity": "medium", "docs_url": "https://www.luckyorange.com/privacy.php" },
144
- "eu.posthog.com": { "company": "PostHog", "service": "PostHog EU Cloud", "category": "session_recording", "severity": "medium", "docs_url": "https://posthog.com/privacy" },
145
- "fullstory.com": { "company": "FullStory", "service": "FullStory", "category": "session_recording", "severity": "medium", "docs_url": "https://www.fullstory.com/legal/privacy-policy/" },
146
- "heapanalytics.com": { "company": "Heap", "service": "Heap Analytics", "category": "session_recording", "severity": "medium", "docs_url": "https://www.heap.io/privacy" },
147
- "hn.inspectlet.com": { "company": "Inspectlet", "service": "Inspectlet", "category": "session_recording", "severity": "medium", "docs_url": "https://www.inspectlet.com/legal" },
148
- "in.hotjar.com": { "company": "Hotjar", "service": "Hotjar Data Ingestion", "category": "session_recording", "severity": "medium", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
149
- "insights.hotjar.com": { "company": "Hotjar", "service": "Hotjar Insights API", "category": "session_recording", "severity": "medium", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
150
- "js-agent.newrelic.com": { "company": "New Relic", "service": "New Relic Browser Session Replay", "category": "session_recording", "severity": "medium", "docs_url": "https://docs.newrelic.com/docs/browser/browser-monitoring/browser-pro-features/session-replay/" },
151
- "js-agent.newrelic.com/replay": { "company": "New Relic", "service": "New Relic Browser Replay", "category": "session_recording", "severity": "critical", "docs_url": "https://newrelic.com/termsandconditions/privacy" },
152
- "js.userpilot.io": { "company": "Userpilot", "service": "Userpilot SDK", "category": "session_recording", "severity": "high", "docs_url": "https://userpilot.com/privacy-policy/" },
153
- "o*.ingest.sentry.io": { "company": "Sentry", "service": "Sentry Replay Ingestion", "category": "session_recording", "severity": "critical", "pattern": true, "docs_url": "https://sentry.io/privacy/" },
154
- "o2.mouseflow.com": { "company": "Mouseflow", "service": "Mouseflow Data Collection", "category": "session_recording", "severity": "high", "docs_url": "https://mouseflow.com/privacy/" },
155
- "rec.smartlook.com": { "company": "Smartlook (Cisco)", "service": "Smartlook Recording Endpoint", "category": "session_recording", "severity": "high", "docs_url": "https://www.smartlook.com/privacy-policy/" },
156
- "recorder.mouseflow.com": { "company": "Mouseflow", "service": "Mouseflow Recorder", "category": "session_recording", "severity": "high", "docs_url": "https://mouseflow.com/privacy/" },
157
- "rs.fullstory.com": { "company": "FullStory", "service": "FullStory", "category": "session_recording", "severity": "medium", "docs_url": "https://www.fullstory.com/legal/privacy-policy/" },
158
- "rum.browser-intake-datadoghq.com": { "company": "Datadog", "service": "Datadog RUM Intake", "category": "session_recording", "severity": "high", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
159
- "script.crazyegg.com": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "severity": "medium", "docs_url": "https://www.crazyegg.com/privacy" },
160
- "script.hotjar.com": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "severity": "medium", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
161
- "sdk.smartlook.com": { "company": "Smartlook", "service": "Smartlook SDK", "category": "session_recording", "severity": "high", "docs_url": "https://www.smartlook.com/privacy-policy/" },
162
- "session-replay.browser-intake-datadoghq.com": { "company": "Datadog", "service": "Datadog Session Replay", "category": "session_recording", "severity": "critical", "note": "Infrastructure monitoring tool that records browser sessions — captures DOM mutations, mouse movements, and user interactions. DevOps teams may enable this without consulting privacy teams.", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
163
- "session-replay.browser-intake-datadoghq.eu": { "company": "Datadog", "service": "Datadog Session Replay (EU)", "category": "session_recording", "severity": "critical", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
164
- "static.hotjar.com": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "severity": "medium", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
165
- "t.contentsquare.net": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "severity": "high", "docs_url": "https://docs.contentsquare.com/uxa-en/#cookies" },
166
- "us.posthog.com": { "company": "PostHog", "service": "PostHog US Cloud", "category": "session_recording", "severity": "medium", "docs_url": "https://posthog.com/privacy" },
167
- "vc.hotjar.io": { "company": "Hotjar", "service": "Hotjar Video Recording", "category": "session_recording", "severity": "medium", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
168
- "www.clarity.ms": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "severity": "medium", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" }
78
+ "api.livesession.io": { "company": "LiveSession", "service": "LiveSession API", "category": "session_recording", "consent_burden": "required", "docs_url": "https://livesession.io/privacy-policy/" },
79
+ "api.luckyorange.com": { "company": "Lucky Orange", "service": "Lucky Orange API", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://www.luckyorange.com/privacy.php" },
80
+ "api.mouseflow.com": { "company": "Mouseflow", "service": "Mouseflow API", "category": "session_recording", "consent_burden": "required", "docs_url": "https://mouseflow.com/privacy/" },
81
+ "app.browsee.io": { "company": "Browsee", "service": "Browsee App", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.browsee.io/privacy-policy" },
82
+ "app.capturly.com": { "company": "Capturly", "service": "Capturly App", "category": "session_recording", "consent_burden": "required", "docs_url": "https://capturly.com/privacy-policy" },
83
+ "app.fullsession.io": { "company": "FullSession", "service": "FullSession App", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.fullsession.io/privacy-policy" },
84
+ "app.heatmap.com": { "company": "Heatmap.com", "service": "Heatmap.com App", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.heatmap.com/privacy-policy" },
85
+ "app.highlight.io": { "company": "Highlight.io", "service": "Highlight Platform", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.highlight.io/privacy" },
86
+ "app.pendo.io": { "company": "Pendo", "service": "Pendo Platform", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.pendo.io/legal/privacy-policy/" },
87
+ "app.plerdy.com": { "company": "Plerdy", "service": "Plerdy Platform", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.plerdy.com/privacy-policy/" },
88
+ "app.posthog.com": { "company": "PostHog", "service": "PostHog Analytics", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://posthog.com/privacy" },
89
+ "app.reactflow.com": { "company": "Reactflow", "service": "Reactflow Platform", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.reactflow.com/privacy-policy" },
90
+ "app.sessionrewind.com": { "company": "SessionRewind", "service": "SessionRewind App", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.sessionrewind.com/privacy-policy" },
91
+ "app.webmaxy.co": { "company": "WebMaxy", "service": "WebMaxy App", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.webmaxy.co/privacy-policy" },
92
+ "app.zipy.ai": { "company": "Zipy", "service": "Zipy Platform", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.zipy.ai/privacy-policy" },
93
+ "bam.nr-data.net/replay": { "company": "New Relic", "service": "New Relic Session Traces", "category": "session_recording", "consent_burden": "required_strict", "note": "APM tool that captures browser session traces — records page load timings, JavaScript errors, and user interaction sequences. Can capture sensitive URL parameters and form data in error traces.", "docs_url": "https://newrelic.com/termsandconditions/privacy" },
94
+ "c.contentsquare.net": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "consent_burden": "required", "docs_url": "https://docs.contentsquare.com/uxa-en/#cookies" },
95
+ "cdn.amplitude.com/replay": { "company": "Amplitude", "service": "Amplitude Session Replay", "category": "session_recording", "consent_burden": "required_strict", "note": "Product analytics platform with session replay — captures complete DOM snapshots and user interactions alongside event analytics data", "docs_url": "https://amplitude.com/privacy" },
96
+ "cdn.appcues.com": { "company": "Appcues", "service": "Appcues Product Adoption", "category": "session_recording", "consent_burden": "required", "note": "Product adoption platform — tracks user behavior patterns and records interactions for onboarding flow optimization", "docs_url": "https://www.appcues.com/legal/privacy" },
97
+ "cdn.auryc.com": { "company": "Auryc", "service": "Auryc Experience Analytics CDN", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.auryc.com/privacy-policy/" },
98
+ "cdn.browsee.io": { "company": "Browsee", "service": "Browsee Session Replay", "category": "session_recording", "consent_burden": "required", "note": "Session replay tool — records mouse movements, clicks, scrolls, and page interactions. Can capture form input data including passwords if not properly masked.", "docs_url": "https://www.browsee.io/privacy-policy" },
99
+ "cdn.capturly.com": { "company": "Capturly", "service": "Capturly Session Recording", "category": "session_recording", "consent_burden": "required", "note": "Session recording and heatmap tool — captures mouse movements, clicks, scrolls, and form interactions for visual analytics playback", "docs_url": "https://capturly.com/privacy-policy" },
100
+ "cdn.clarity.ms/collect": { "company": "Microsoft", "service": "Microsoft Clarity Data", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
101
+ "cdn.clicktale.net": { "company": "Contentsquare", "service": "ClickTale (Contentsquare) CDN", "category": "session_recording", "consent_burden": "required", "docs_url": "https://docs.contentsquare.com/uxa-en/#cookies" },
102
+ "cdn.datadog-agent.com": { "company": "Datadog", "service": "Datadog RUM Session Replay", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
103
+ "cdn.decibelinsight.net": { "company": "Medallia", "service": "Decibel (Medallia) CDN", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.medallia.com/privacy-policy/" },
104
+ "cdn.dynatrace.com/replay": { "company": "Dynatrace", "service": "Dynatrace Session Replay", "category": "session_recording", "consent_burden": "required_strict", "note": "Enterprise APM with session replay — captures complete browser sessions including user actions, DOM state, and network calls. DevOps teams enable this broadly without privacy review.", "docs_url": "https://www.dynatrace.com/company/trust-center/privacy/" },
105
+ "cdn.fullsession.io": { "company": "FullSession", "service": "FullSession Recording", "category": "session_recording", "consent_burden": "required", "note": "Session recording platform — captures complete user sessions including heatmaps, click maps, and interaction recordings with form analytics", "docs_url": "https://www.fullsession.io/privacy-policy" },
106
+ "cdn.gainsight.com/px": { "company": "Gainsight", "service": "Gainsight PX Product Analytics", "category": "session_recording", "consent_burden": "required", "note": "Customer success product analytics — tracks feature adoption, user engagement, and session behavior for retention analytics", "docs_url": "https://www.gainsight.com/privacy/" },
107
+ "cdn.glassbox.com": { "company": "Glassbox", "service": "Glassbox Session Replay", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.glassbox.com/privacy-policy/" },
108
+ "cdn.heatmap.com": { "company": "Heatmap.com", "service": "Heatmap.com Revenue Analytics", "category": "session_recording", "consent_burden": "required", "note": "Heatmap tool that ties clicks and scrolls to revenue data — shows exactly which page elements drive purchases, tracking complete user journeys through checkout", "docs_url": "https://www.heatmap.com/privacy-policy" },
109
+ "cdn.highlight.io": { "company": "Highlight.io", "service": "Highlight Session Replay", "category": "session_recording", "consent_burden": "required", "note": "Open-source session replay — records complete DOM snapshots, network requests, console logs, and user interactions. Full-stack observability means your entire browsing session is captured.", "docs_url": "https://www.highlight.io/privacy" },
110
+ "cdn.inspectlet.com": { "company": "Inspectlet", "service": "Inspectlet Session Recording", "category": "session_recording", "consent_burden": "required", "note": "Session recording tool that captures eye-tracking heatmaps, mouse movement recordings, and form analytics. Can record sensitive data in form fields if not masked.", "docs_url": "https://www.inspectlet.com/legal" },
111
+ "cdn.livesession.io": { "company": "LiveSession", "service": "LiveSession Recording CDN", "category": "session_recording", "consent_burden": "required", "docs_url": "https://livesession.io/privacy-policy/" },
112
+ "cdn.logrocket.com": { "company": "LogRocket", "service": "LogRocket Session Replay", "category": "session_recording", "consent_burden": "required_strict", "note": "Frontend monitoring with session replay — captures full DOM snapshots, Redux state, network requests, and console logs. Records everything a developer would see in DevTools.", "docs_url": "https://logrocket.com/privacy/" },
113
+ "cdn.logrocket.io": { "company": "LogRocket", "service": "LogRocket CDN", "category": "session_recording", "consent_burden": "required_strict", "docs_url": "https://logrocket.com/privacy/" },
114
+ "cdn.luckyorange.com": { "company": "Lucky Orange", "service": "Lucky Orange CDN", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://www.luckyorange.com/privacy.php" },
115
+ "cdn.mixpanel.com/replay": { "company": "Mixpanel", "service": "Mixpanel Session Replay", "category": "session_recording", "consent_burden": "required_strict", "note": "Product analytics with session replay — records user sessions alongside event tracking for behavior analysis and debugging", "docs_url": "https://mixpanel.com/legal/privacy-policy/" },
116
+ "cdn.mouseflow.com": { "company": "Mouseflow", "service": "Mouseflow Session Replay", "category": "session_recording", "consent_burden": "required", "docs_url": "https://mouseflow.com/privacy/" },
117
+ "cdn.mouseflow.com/js": { "company": "Mouseflow", "service": "Mouseflow JavaScript SDK", "category": "session_recording", "consent_burden": "required", "docs_url": "https://mouseflow.com/privacy/" },
118
+ "cdn.mouseflow.com/projects": { "company": "Mouseflow", "service": "Mouseflow Project Config", "category": "session_recording", "consent_burden": "required", "docs_url": "https://mouseflow.com/privacy/" },
119
+ "cdn.nextools.io": { "company": "Nextools", "service": "Nextools Analytics Recording", "category": "session_recording", "consent_burden": "required", "note": "Web analytics with session recording — tracks user behavior including heatmaps, scroll depth, and session replay for conversion optimization", "docs_url": "https://nextools.io/privacy" },
120
+ "cdn.openreplay.com": { "company": "OpenReplay", "service": "OpenReplay Session Recording", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://openreplay.com/privacy" },
121
+ "cdn.pendo.io": { "company": "Pendo", "service": "Pendo Product Analytics", "category": "session_recording", "consent_burden": "required", "note": "Product analytics with session replay — captures user interactions, feature usage, and page navigation for product decisions", "docs_url": "https://www.pendo.io/legal/privacy-policy/" },
122
+ "cdn.plerdy.com": { "company": "Plerdy", "service": "Plerdy Session Recording", "category": "session_recording", "consent_burden": "required", "note": "All-in-one CRO tool with session recording — captures heatmaps, click maps, scroll depth, and complete session replays for conversion optimization", "docs_url": "https://www.plerdy.com/privacy-policy/" },
123
+ "cdn.quantum-metric.com": { "company": "Quantum Metric", "service": "Quantum Metric CDN", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.quantummetric.com/legal/privacy-policy/" },
124
+ "cdn.reactflow.com": { "company": "Reactflow", "service": "Reactflow Session Recording", "category": "session_recording", "consent_burden": "required", "note": "Session recording tool — records complete user interactions as video-like playback including mouse movements, clicks, scrolling, and form interactions", "docs_url": "https://www.reactflow.com/privacy-policy" },
125
+ "cdn.replay.io": { "company": "Replay.io", "service": "Replay.io Session Recording", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.replay.io/privacy" },
126
+ "cdn.sentry.io/replay": { "company": "Sentry", "service": "Sentry Session Replay", "category": "session_recording", "consent_burden": "required_strict", "note": "Error monitoring tool that now records complete DOM snapshots of user sessions. Captures EVERYTHING the user types and sees, including sensitive form data, unless developers manually mask fields. Shipped as opt-in but enabled broadly.", "docs_url": "https://sentry.io/privacy/" },
127
+ "cdn.sessionrewind.com": { "company": "SessionRewind", "service": "SessionRewind Recording", "category": "session_recording", "consent_burden": "required", "note": "Session replay tool — records user sessions as video-like playbacks, capturing all interactions including typing, scrolling, and clicking", "docs_url": "https://www.sessionrewind.com/privacy-policy" },
128
+ "cdn.sessionstack.com": { "company": "SessionStack", "service": "SessionStack Recording CDN", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.sessionstack.com/privacy-policy/" },
129
+ "cdn.smartlook.cloud": { "company": "Smartlook", "service": "Smartlook Cloud CDN", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.smartlook.com/privacy-policy/" },
130
+ "cdn.smartlook.com": { "company": "Smartlook (Cisco)", "service": "Smartlook Session Recording", "category": "session_recording", "consent_burden": "required", "note": "Session recording and analytics — records user sessions as video with event-based analytics. Now owned by Cisco through acquisition.", "docs_url": "https://www.smartlook.com/privacy-policy/" },
131
+ "cdn.sprig.com": { "company": "Sprig", "service": "Sprig In-Product Surveys", "category": "session_recording", "consent_burden": "required", "note": "In-product survey and session replay tool — captures user sessions and triggers surveys based on behavior patterns", "docs_url": "https://sprig.com/privacy-policy" },
132
+ "cdn.usefathom.com": { "company": "Fathom Analytics", "service": "Fathom Privacy Analytics", "category": "session_recording", "consent_burden": "minimal", "note": "Privacy-focused analytics — no cookies, no session recording, GDPR-compliant by design. Listed for reference as a privacy-respecting alternative.", "docs_url": "https://usefathom.com/privacy" },
133
+ "cdn.userback.io": { "company": "Userback", "service": "Userback Feedback Recording", "category": "session_recording", "consent_burden": "required", "note": "User feedback tool with session recording — captures video recordings of user sessions alongside feedback submissions", "docs_url": "https://www.userback.io/privacy" },
134
+ "cdn.userpilot.io": { "company": "Userpilot", "service": "Userpilot Session Recording", "category": "session_recording", "consent_burden": "required", "docs_url": "https://userpilot.com/privacy-policy/" },
135
+ "cdn.usertesting.com": { "company": "UserTesting", "service": "UserTesting Recordings", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.usertesting.com/privacy-center" },
136
+ "cdn.uxcam.com": { "company": "UXCam", "service": "UXCam Session Replay", "category": "session_recording", "consent_burden": "required", "docs_url": "https://uxcam.com/privacy-policy" },
137
+ "cdn.uxtweak.com": { "company": "UXtweak", "service": "UXtweak Session Recording", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://www.uxtweak.com/privacy-policy/" },
138
+ "cdn.walkme.com": { "company": "WalkMe (SAP)", "service": "WalkMe Digital Adoption", "category": "session_recording", "consent_burden": "required", "note": "SAP-owned digital adoption platform — captures user behavior, session recordings, and interaction patterns for enterprise software analytics", "docs_url": "https://www.walkme.com/privacy-policy/" },
139
+ "cdn.webmaxy.co": { "company": "WebMaxy", "service": "WebMaxy Session Recording", "category": "session_recording", "consent_burden": "required", "note": "All-in-one analytics with session recording, heatmaps, and funnel analysis — captures complete user journeys and behavioral patterns", "docs_url": "https://www.webmaxy.co/privacy-policy" },
140
+ "cdn.whatfix.com": { "company": "Whatfix", "service": "Whatfix Digital Adoption", "category": "session_recording", "consent_burden": "required", "note": "Digital adoption platform with session recording — captures user interactions for product adoption analytics and guided tours", "docs_url": "https://whatfix.com/privacy-policy/" },
141
+ "cdn.zipy.ai": { "company": "Zipy", "service": "Zipy Session Replay", "category": "session_recording", "consent_burden": "required", "note": "Session replay and error tracking — records complete user sessions including DOM snapshots, network requests, and console logs. Captures everything a developer would see.", "docs_url": "https://www.zipy.ai/privacy-policy" },
142
+ "clarity.ms": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" },
143
+ "d10lpsik1i8c69.cloudfront.net": { "company": "Lucky Orange", "service": "Lucky Orange", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://www.luckyorange.com/privacy.php" },
144
+ "eu.posthog.com": { "company": "PostHog", "service": "PostHog EU Cloud", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://posthog.com/privacy" },
145
+ "fullstory.com": { "company": "FullStory", "service": "FullStory", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://www.fullstory.com/legal/privacy-policy/" },
146
+ "heapanalytics.com": { "company": "Heap", "service": "Heap Analytics", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://www.heap.io/privacy" },
147
+ "hn.inspectlet.com": { "company": "Inspectlet", "service": "Inspectlet", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://www.inspectlet.com/legal" },
148
+ "in.hotjar.com": { "company": "Hotjar", "service": "Hotjar Data Ingestion", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
149
+ "insights.hotjar.com": { "company": "Hotjar", "service": "Hotjar Insights API", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
150
+ "js-agent.newrelic.com": { "company": "New Relic", "service": "New Relic Browser Session Replay", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://docs.newrelic.com/docs/browser/browser-monitoring/browser-pro-features/session-replay/" },
151
+ "js-agent.newrelic.com/replay": { "company": "New Relic", "service": "New Relic Browser Replay", "category": "session_recording", "consent_burden": "required_strict", "docs_url": "https://newrelic.com/termsandconditions/privacy" },
152
+ "js.userpilot.io": { "company": "Userpilot", "service": "Userpilot SDK", "category": "session_recording", "consent_burden": "required", "docs_url": "https://userpilot.com/privacy-policy/" },
153
+ "o*.ingest.sentry.io": { "company": "Sentry", "service": "Sentry Replay Ingestion", "category": "session_recording", "consent_burden": "required_strict", "pattern": true, "docs_url": "https://sentry.io/privacy/" },
154
+ "o2.mouseflow.com": { "company": "Mouseflow", "service": "Mouseflow Data Collection", "category": "session_recording", "consent_burden": "required", "docs_url": "https://mouseflow.com/privacy/" },
155
+ "rec.smartlook.com": { "company": "Smartlook (Cisco)", "service": "Smartlook Recording Endpoint", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.smartlook.com/privacy-policy/" },
156
+ "recorder.mouseflow.com": { "company": "Mouseflow", "service": "Mouseflow Recorder", "category": "session_recording", "consent_burden": "required", "docs_url": "https://mouseflow.com/privacy/" },
157
+ "rs.fullstory.com": { "company": "FullStory", "service": "FullStory", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://www.fullstory.com/legal/privacy-policy/" },
158
+ "rum.browser-intake-datadoghq.com": { "company": "Datadog", "service": "Datadog RUM Intake", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
159
+ "script.crazyegg.com": { "company": "Crazy Egg", "service": "Crazy Egg", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://www.crazyegg.com/privacy" },
160
+ "script.hotjar.com": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
161
+ "sdk.smartlook.com": { "company": "Smartlook", "service": "Smartlook SDK", "category": "session_recording", "consent_burden": "required", "docs_url": "https://www.smartlook.com/privacy-policy/" },
162
+ "session-replay.browser-intake-datadoghq.com": { "company": "Datadog", "service": "Datadog Session Replay", "category": "session_recording", "consent_burden": "required_strict", "note": "Infrastructure monitoring tool that records browser sessions — captures DOM mutations, mouse movements, and user interactions. DevOps teams may enable this without consulting privacy teams.", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
163
+ "session-replay.browser-intake-datadoghq.eu": { "company": "Datadog", "service": "Datadog Session Replay (EU)", "category": "session_recording", "consent_burden": "required_strict", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
164
+ "static.hotjar.com": { "company": "Hotjar", "service": "Hotjar", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
165
+ "t.contentsquare.net": { "company": "Contentsquare", "service": "Contentsquare", "category": "session_recording", "consent_burden": "required", "docs_url": "https://docs.contentsquare.com/uxa-en/#cookies" },
166
+ "us.posthog.com": { "company": "PostHog", "service": "PostHog US Cloud", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://posthog.com/privacy" },
167
+ "vc.hotjar.io": { "company": "Hotjar", "service": "Hotjar Video Recording", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie-Information" },
168
+ "www.clarity.ms": { "company": "Microsoft", "service": "Microsoft Clarity", "category": "session_recording", "consent_burden": "contested", "docs_url": "https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list" }
169
169
  }
170
170
  }