static.hotjar.com in a checkout page script inventory
static.hotjar.com appeared on 5 of the 187 United States store cart pages we read on 30 August 2026, which is 3% of them, and on 1 it was loaded by a script or iframe tag, meaning it executed in the page.
What it is
Hotjar platform delivering heatmaps, session recordings, and user behavior analytics for websites.
Source: the title and description published at hotjar.com, read on 30 August 2026. Quoted there as “Contentsquare + Hotjar | powering better digital experiences”.
What to write in the justification column
Document analytics implementation and data retention policies. Verify compliance with privacy regulations and PCI DSS third-party requirements.
This is a starting sentence, not an assessment. Requirement 6.4.3 wants your reason, written by someone at your company who can defend it.
Stores where we saw it
5 of 5
Up to ten examples from our scan. These are public storefronts and the observation is only that the host appeared in the HTML of their cart page on 30 August 2026.
Where to look next
Other analytics hosts
All 448 hosts in the directory · Scan your own checkout page
Categories in this directory: Payment, Tag manager, Fraud and security, Consent, Analytics, Advertising, Email and SMS, Personalisation, Reviews, Chat and support, Loyalty, Subscriptions, Shipping and returns, Media and social, Fonts and CDN, Merchant-owned, Unclassified.