Hot Jar does anonymize IP addresses by default so no action is needed with IPs.
“IP addresses of visitors are always suppressed before being stored. We set the last octet of IPv4 addresses, all connections to Hotjar are made via IPv4, to 0 to ensure the full IP address is never written to disk.”
As per the other visual intelligence tools Hot Jar records keystroke data, this information can be suppressed in the settings, it is not automatic like VWO, here is how:
This needs to be done per site within a Hot Jar account not per account globally. If you are part of our master agency account this has been done automatically for you.
Go to your site settings and switch off record keystroke data. Then select suppress on page numeric text and emails addresses:
Here is a guide from Hot Jar: https://help.hotjar.com/hc/en-us/articles/360001295854-
IMPORTANT: Before May 25th all session recordings will need to be purged to remove the chance of any keystroke data remaining Hot Jar databases that is not GDPR compliant.
Further advice from Hot Jar is: