# User Tracking Without Consent

> Detects user tracking mechanisms deployed without checking for consent, including session recording, heatmaps, and behavioral analytics.

- Skill: `zakirkun/user-tracking-without-consent` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add zakirkun/user-tracking-without-consent`
- Raw SKILL.md: https://api.skillmd.com/api/skills/zakirkun/user-tracking-without-consent/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Data & Analytics
- Author: zakirkun (https://skillmd.com/u/zakirkun)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/zakirkun/user-tracking-without-consent

---


# User Tracking Without Consent

## Overview
Session recording tools (Hotjar, FullStory, LogRocket), heatmap tools, and behavioral analytics that collect user interactions may capture sensitive data entered by users. Loading these unconditionally without consent violates GDPR and may capture passwords, payment data, or health information.

## Remediation
- Integrate tracking scripts with consent management
- Configure tools to mask sensitive form fields
- Provide opt-out mechanism for tracking