Ptengine
Web analytics, heatmaps and personalisation platform whose JavaScript SDK tracks pageviews, clicks and scrolls with servers in Japan and China.
What does Ptengine do?
What is Ptengine
Ptengine is a web analytics and customer engagement platform that combines pageview and event tracking with heatmaps (clicks, scrolls, attention) and on site personalisation. Originating from Japan and active in China and internationally, it is widely used by ecommerce and content publishers.
Data collected and how it works
The Ptengine JavaScript SDK sets cookies prefixed with _pt and records pageviews, custom events, click coordinates, scroll depth and mouse movement to generate heatmaps and session insights. Data is sent to Ptengine servers hosted in Japan and China.
GDPR considerations
Ptengine clearly performs non essential analytics and behavioural tracking, requiring prior consent under Article 5(3) of the ePrivacy Directive and Article 6(1)(a) of the GDPR. Transfers to Japan benefit from the EU adequacy decision for private sector data, while transfers to China require Standard Contractual Clauses with strong supplementary measures.
Risks and mitigations
Risks include detailed behavioural profiling through heatmaps, transfers to China where surveillance laws are wide, and possible exposure of form content if not masked. Mitigations include strict consent gating, enabling input masking, disabling session recording, anonymising IPs and signing a data processing agreement with appropriate transfer mechanisms.
Implementation best practices
Load Ptengine through a consent management platform in the analytics and personalisation categories, only after the corresponding consent. Configure the SDK to mask input fields, exclude pages with sensitive content, set short retention, and document Japan and China transfers in your records of processing.
Ptengine and the GDPR
Ptengine is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (GDPR Art. 6(1)(a)) and ePrivacy Directive Art. 5(3) for cookie storage
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive, TTDSG, LIL, LOPDGDD
Impact assessment (DPIA)
A DPIA is strongly recommended due to behavioural tracking through heatmaps, the use of personalisation, transfers to Japan and China and potential capture of input content. Document data flows, retention, transfer safeguards and mitigations such as input masking.
Sample text for your banner
We use Ptengine to understand how visitors use our website and to personalise content. This service stores cookies and transfers data to Japan and China. You can accept or refuse from our consent banner.
What Ptengine sets and contacts
- Tracking method
- JavaScript SDK that records pageviews, clicks, scroll depth, mouse movements for heatmaps, and supports on site personalisation, sending data to Ptengine servers in Japan and China.
- Server location
- Japan and China
- Data transferred outside the EU
- Personal data is transmitted to Ptengine servers located in Japan and China; transfers from the EU require Standard Contractual Clauses and supplementary measures, with Japan benefiting from a partial adequacy decision and China being subject to additional risk assessment.
Cookies set (6)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _ptqs | analytics | 30 minutes | Stores session state, last query string and referrer used by the Ptengine SDK for session attribution. |
| _ptUvar | analytics | 2 years | Persistent visitor identifier used by Ptengine to recognise returning users across sessions. |
| _ptUseridvar1 | analytics | 2 years | Custom user identifier set by Ptengine when the publisher provides a logged in user reference. |
| _ptHQID | analytics | 1 year | Heatmap identifier used by Ptengine to associate captured interactions with heatmap experiments. |
| _ptSeg | marketing | 1 year | Stores the audience segments computed by Ptengine to deliver personalisation rules. |
| _ptUid | analytics | 2 years | Anonymous user identifier set by Ptengine for analytics aggregation. |
Third-party domains contacted (6)
ptengine.comptengine.jpjs.ptengine.comjs.ptengine.jpapi.ptengine.comptengine.cn
Frequently asked questions about Ptengine
Can't find your question? Write to us, we answer fast.
What cookies does Ptengine set?
Ptengine sets first party cookies on the publisher domain prefixed with _pt, including _ptqs for queries and session state, _ptUseridvar1 and _ptUvar for the persistent visitor identifier, plus heatmap and session related cookies. These cookies enable analytics, heatmaps and personalisation and are not strictly necessary.
Is user consent required before loading Ptengine?
Yes. Because Ptengine performs detailed behavioural tracking through heatmaps and personalisation, prior, free, specific and informed consent is required under Article 5(3) of the ePrivacy Directive and Article 6(1)(a) of the GDPR. The SDK must remain inactive until consent is granted.
What is the legal basis for processing personal data via Ptengine?
The legal basis is the data subject consent under Article 6(1)(a) of the GDPR, combined with Article 5(3) of the ePrivacy Directive for cookies and similar technologies. Legitimate interests are not appropriate for behavioural tracking and personalisation of this type.
Does Ptengine transfer data outside the EU?
Yes. Ptengine hosts data on servers located in Japan and China. Japan benefits from a partial EU adequacy decision for private sector data, while transfers to China must be covered by Standard Contractual Clauses with supplementary measures and a transfer impact assessment.
Is a DPIA required when using Ptengine?
A DPIA is strongly recommended due to systematic behavioural monitoring, personalisation profiling, transfers to a non adequate country (China) and the possible capture of input content. The DPIA should describe data flows, retention, transfer mechanisms and mitigations.
How do I correctly implement Ptengine in a GDPR compliant way?
Load Ptengine through a consent management platform with analytics and personalisation categories, enable input masking, exclude sensitive pages from heatmaps, reduce retention and sign a data processing agreement with appropriate transfer mechanisms. Inform users clearly about Japan and China hosting.
Are there privacy friendly alternatives to Ptengine?
Privacy oriented alternatives include Matomo with EU hosting and on premise heatmaps, Mouseflow EU, Contentsquare with EU configuration and Hotjar EU. These tools provide heatmaps, recordings and analytics with EU data residency and stronger data minimisation options.
How should I update my cookie policy to mention Ptengine?
Add Ptengine in your cookie policy under analytics and personalisation with the _pt cookies, durations and purposes. Indicate that data is processed by Ptengine on servers in Japan and China, mention the applicable transfer mechanism and link to the Ptengine privacy policy.
Etracker
Etracker is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Etracker offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Etracker empowers organizations to optimize strategy and maximize return on investment.
Pingdom Uptime Monitoring
Pingdom Uptime Monitoring is a website monitoring and uptime tracking solution that ensures your digital properties remain available and performant around the clock. It provides real-time alerts, status page hosting, and detailed performance reports. Pingdom Uptime Monitoring monitors websites, APIs, and servers from multiple global locations, detecting downtime and degradation before they impact users. With incident management and SLA tracking, Pingdom Uptime Monitoring helps maintain reliability and trust.
Genezio
genezio is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. genezio offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, genezio empowers organizations to optimize strategy and maximize return on investment.
Spinnakr
Spinnakr is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Spinnakr offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Spinnakr empowers organizations to optimize strategy and maximize return on investment.
Twitter Analytics
Twitter Analytics is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Twitter Analytics supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Twitter Analytics enables informed decisions that improve experience and drive results.
Triple Whale
Triple Whale is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Triple Whale offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Triple Whale empowers organizations to optimize strategy and maximize return on investment.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.