Mieruca
Mieruca is a heatmap and behaviour analytics tool from Faber Company, based in Japan. It records scroll, click and attention heatmaps and tracks on site behaviour so teams can optimise their pages. It relies on a first party analytics cookie and behavioural event capture. Because the heatmaps record detailed behaviour, the cookie goes beyond strictly necessary and requires consent under the ePrivacy rules in the European Union.
What does Mieruca do?
What Mieruca is
Mieruca is a heatmap and behaviour analytics tool developed by Faber Company and based in Japan. It helps website teams understand how visitors actually use a page by recording scroll, click and attention heatmaps. Alongside the heatmaps it tracks on site behaviour so that designers and marketers can optimise layout and content. It is a conversion and user experience tool rather than a pure traffic counter.
Data and cookies
Mieruca relies on a first party analytics cookie, typically named _mieruca_id, and a session cookie, together with behavioural event capture. It records where visitors move, click and pause, and aggregates this into heatmaps. Because the recording is granular and can describe how an individual interacts with a page over a session, the data is personal data. Heatmaps that capture detailed behaviour therefore go beyond strictly necessary processing.
GDPR and ePrivacy
The ePrivacy rules require prior consent before the analytics and heatmap cookie is stored, under art. 5(3), because it is not strictly necessary. The GDPR then governs the behavioural data that results. Heatmaps record more detail than a simple page count, so regulators expect a clear consent step. You should also be careful to mask form fields and any sensitive areas so that the recording does not capture content that users type.
Consent
The lawful basis is consent under art. 6(1)(a) of the GDPR, paired with ePrivacy consent for the cookie. Consent must be freely given, specific, informed and as easy to withdraw as to give. Mieruca should load only after the visitor accepts the analytics category in your consent banner. Until consent is given, no heatmap cookie should be written and no behavioural events should be recorded.
International transfers
Mieruca processes data in Japan, which is a transfer outside the EEA. Japan benefits from a European Commission adequacy decision that has been in force since 2019, so transfers can take place under the supplementary rules without additional Standard Contractual Clauses in most cases. You should still verify that your specific data flows fall within the scope of the adequacy decision and the supplementary rules, and record this in your documentation.
Practical compliance steps
Load Mieruca through a consent management platform so it runs only after analytics consent. Configure masking for form fields and sensitive areas, and limit recording to what you need. List the _mieruca_id and session cookies in your cookie policy with purpose and lifetime, and explain that data is processed in Japan under the adequacy decision. Sign the data processing agreement and document your retention periods and your DPIA.
Mieruca and the GDPR
Mieruca is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- consent (art. 6(1)(a)) and ePrivacy art. 5(3) consent for the analytics and heatmap cookie; heatmaps that capture detailed behaviour go beyond strictly necessary
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive 2002/58/EC, Japan adequacy decision (2019), APPI, TTDSG (Germany), LOPDGDD (Spain), LIL (France)
Impact assessment (DPIA)
A DPIA is advisable because Mieruca captures detailed behavioural data through scroll, click and attention heatmaps that can reveal how individuals interact with a page. Assess the granularity of the recording, whether any input or sensitive areas are captured, retention periods, and reliance on the Japan adequacy decision. Masking sensitive fields and limiting recording reduce the residual risk.
Sample text for your banner
We use Mieruca to see how visitors scroll, click and read our pages so we can improve them. With your consent, Mieruca sets a first party analytics cookie and records anonymised behaviour through heatmaps. You can accept or decline, and you may withdraw consent at any time in our cookie settings.
What Mieruca sets and contacts
- Tracking method
- heatmap and behavioural analytics with a first party cookie
- Server location
- Japan
- Data transferred outside the EU
- data is processed in Japan, which benefits from a European Commission adequacy decision (in force since 2019) for transfers under the supplementary rules, so additional SCCs are generally not required but verify coverage.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _mieruca_id | analytics | persistent (up to 1 year) | Mieruca first party visitor identifier used to build scroll, click and attention heatmaps and to analyse on site behaviour. |
| _mieruca_session | analytics | session | Session cookie used to group behavioural events within a single visit for heatmap analytics. |
| _mieruca_hm | analytics | persistent (up to 1 year) | Heatmap helper cookie used to aggregate scroll, click and attention data across pages. |
Third-party domains contacted (3)
mieruca.commieruca-heatmap.comcdn.mieruca.com
Frequently asked questions about Mieruca
Can't find your question? Write to us, we answer fast.
What cookies does Mieruca set?
Mieruca uses a first party setup. It typically sets a persistent analytics cookie called _mieruca_id and a session cookie called _mieruca_session. They store an identifier and behavioural data used to build scroll, click and attention heatmaps. They are analytics cookies, not strictly necessary ones.
Is consent required to use Mieruca?
Yes. The heatmap and analytics cookie is not strictly necessary, so ePrivacy art. 5(3) requires prior consent before it is set. Because heatmaps record detailed behaviour, Mieruca should load only after the visitor accepts the analytics category in your consent banner.
What is the legal basis for processing?
The lawful basis is consent under art. 6(1)(a) of the GDPR, combined with ePrivacy consent for the cookie. Heatmaps that capture detailed behaviour go beyond strictly necessary processing, so consent is the appropriate basis rather than legitimate interest.
Does Mieruca transfer data to third countries?
Yes. Data is processed in Japan, which is outside the EEA. Japan benefits from a European Commission adequacy decision in force since 2019, so transfers can take place under the supplementary rules without extra Standard Contractual Clauses in most cases, but you should verify coverage for your flows.
Do we need a DPIA for Mieruca?
A DPIA is advisable. Mieruca captures detailed behavioural data through scroll, click and attention heatmaps that can show how individuals interact with a page. The assessment should review the recording granularity, masking of sensitive fields, retention and reliance on the Japan adequacy decision.
How do we implement Mieruca in a compliant way?
Load Mieruca through a consent management platform so it runs only after analytics consent. Enable masking for form fields and sensitive areas, list the _mieruca_id and session cookies in your cookie policy, sign the data processing agreement and note that data is processed in Japan under the adequacy decision.
What are the alternatives to Mieruca?
Other heatmap and behaviour analytics tools exist, including European options and privacy first tools that aggregate data without persistent identifiers. The right choice depends on whether you need detailed scroll, click and attention heatmaps and on how much consent dependent recording you want to run.
How should we update our cookie policy for Mieruca?
Add Mieruca as an analytics provider in your cookie policy. Describe the _mieruca_id analytics cookie and the session cookie, their purpose and duration, and the heatmap processing. State that data is processed in Japan under the adequacy decision and explain how visitors can withdraw consent.
SimpleSat
SimpleSat is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. SimpleSat offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, SimpleSat empowers organizations to optimize strategy and maximize return on investment.
Netvibes
Netvibes is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Netvibes offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Netvibes empowers organizations to optimize strategy and maximize return on investment.
Jetpack
Jetpack is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Jetpack offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Jetpack empowers organizations to optimize strategy and maximize return on investment.
Chartbeat
Chartbeat is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Chartbeat supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Chartbeat enables informed decisions that improve experience and drive results.
Graphly
Graphly is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Graphly offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Graphly empowers organizations to optimize strategy and maximize return on investment.
Parse.ly
Parse.ly is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Parse.ly supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Parse.ly enables informed decisions that improve experience and drive results.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.