User Tracking Without Consent

Detects user tracking mechanisms deployed without checking for consent, including session recording, heatmaps, and behavioral analytics.

zakirkun e8f6b61 2 files · 2.1 KB Updated

File contents

User Tracking Without Consent

Overview

Session recording tools (Hotjar, FullStory, LogRocket), heatmap tools, and behavioral analytics that collect user interactions may capture sensitive data entered by users. Loading these unconditionally without consent violates GDPR and may capture passwords, payment data, or health information.

Remediation

  • Integrate tracking scripts with consent management
  • Configure tools to mask sensitive form fields
  • Provide opt-out mechanism for tracking

zakirkun/ice-tea/tree/main/skills/privacy/tracking-without-consent commit e8f6b6107f

Frequently asked questions

npx skillmds@latest add zakirkun/user-tracking-without-consent