Assertion Supported AI assessment confidence: 95% certainty 4/5 debate potential 1/5

Hotjar reconstructs user sessions via HTML rather than recording video

David Darmanin · EP 558: 2 yr Old HotJar Passes $500k MRR Helping 10,000 Customers See What Website Visitors Are Doing with CEO David Darmanin · Feb 2, 2017 · at 4:04

Hotjar founder and CEO David Darmanin explains the technical architecture and privacy safeguards behind the company's user session recording tool.

0:00 / 0:14exact quote · 14.6s

720p mp4 · rendered on demand · StarZero watermark

“From a privacy aspect point of view it's not really a video, right? So we're kind of recreating the HTML of what's being done. And in fact, we were super careful to avoid any like sensitive data or stuff that's shown”

quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →

The claim, plainly

Hotjar does not capture video recordings of website visitors, but rather reconstructs user sessions by replaying HTML DOM interactions while filtering out sensitive user data.

a quote alone can be ambiguous, so this restates it with the references and context of the conversation around it resolved. AI-written; the tape below the player is the source.

Assessment

Technical documentation, engineering disclosures, and an independent November 2017 academic study by Princeton University's Center for Information Technology Policy confirm that Hotjar session recordings do not capture video files. Instead, the technology captures an initial DOM snapshot and tracks subsequent DOM mutations (via MutationObserver) alongside user events (cursor movements, clicks, scrolling), serializing and replaying them to simulate video playback. Furthermore, the tool incorporated built-in client-side data masking and suppression controls (such as automatically masking credit card numbers, password fields, and input fields) prior to transmitting session data.

Hotjar technical disclosures confirm session recordings capture DOM snapshots and MutationObserver event streams rather than recording video files.
A November 2017 Princeton CITP security study independently confirmed that Hotjar operates via DOM/event reconstruction and verified the presence of automated sensitive data masking mechanisms.
Client-side masking features and suppression attributes (such as data-hj-masked and default masking of payment/password inputs) filter sensitive user data on the browser before transmission.

Checked against

[1] stackoverflow.com [2] quora.com [3] hotjar.com [4] eventwatcher.dev [5] themarketingtechnologist.co [6] hotjar.com [7] softr.io [8] princeton.edu

princeton study hotjar session replay dom sensitive data masking hotjar session recording dom mutations capture sensitive data masking hotjar how recordings work DOM html video masking suppression how does hotjar recording work html dom event stream video

assessed as of 2026-09-02

This assessment is an AI reading of a public statement, made against the cited references with the confidence shown. It can be wrong. The quote, the tape and the references are all on this page; if something is off, use report an error below. full disclaimer →

Mentioned

David Darmanin Hotjar

⚑ Spot an error? Report it

More from David Darmanin

Assertion Not checkable as stated

Hotjar serves 10,000 paying customers across 180,000 websites

“So we are serving just over 10,000 customers. And yeah, you mentioned how many sites. So it's around a 180,000 now running hard job.”

David Darmanin Feb 2, 2017 ▶ 6:33 EP 558: 2 yr Old HotJar Passes $500k MRR Helping 10,000 Customers See What Website Visitors Are Doing with CEO David Darmanin

Insight

B2B freemium models see higher conversion than consumer software

“When you apply the consumer model to the B to B it's, it is typically higher actually.”

David Darmanin Feb 2, 2017 ▶ 7:21 EP 558: 2 yr Old HotJar Passes $500k MRR Helping 10,000 Customers See What Website Visitors Are Doing with CEO David Darmanin

Assertion Not checkable as stated

Hotjar doubled its annual revenue run rate to €6M

“Yes. We're pretty much double that now.”

David Darmanin Feb 2, 2017 ▶ 7:34 EP 558: 2 yr Old HotJar Passes $500k MRR Helping 10,000 Customers See What Website Visitors Are Doing with CEO David Darmanin

Assertion Not checkable as stated

Hotjar's free-to-paid conversion grows from 2% to 9% by month eight

“In the first month that someone signs up, we see roughly a conversion of two percent. And then over, let's say six, seven, eight months, it goes all the way up. It fluctuates anywhere in the region of eight percent, nine percent.”

David Darmanin Feb 2, 2017 ▶ 13:39 EP 558: 2 yr Old HotJar Passes $500k MRR Helping 10,000 Customers See What Website Visitors Are Doing with CEO David Darmanin

Insight

Staying bootstrapped removes pressure to prematurely monetize a freemium community

“We've been approached by VC firms, we've received offers, but we like to think that it's an advantage for us to not take funding for now, purely because it removes any pressure for us to monetize that freemium, that community model that we have, right?”

David Darmanin Feb 2, 2017 ▶ 16:57 EP 558: 2 yr Old HotJar Passes $500k MRR Helping 10,000 Customers See What Website Visitors Are Doing with CEO David Darmanin

Disclosure

Hotjar CEO David Darmanin says future fundraising is likely

“Will we raise in the future? I'd say the probability is more on the yes side.”

David Darmanin Feb 2, 2017 ▶ 17:20 EP 558: 2 yr Old HotJar Passes $500k MRR Helping 10,000 Customers See What Website Visitors Are Doing with CEO David Darmanin

Hotjar reconstructs user sessions via HTML rather than recording video

More from David Darmanin

Turn any episode into a week of clips.