> How Ptengine tracks visitors with heatmaps, which cookies it sets and how to deploy it in a GDPR and ePrivacy compliant way with consent.
>
> Canonical: https://www.flowconsent.com/en/services/analytics/ptengine

Analytics

# Ptengine

Analytics

Web analytics, heatmaps and personalisation platform whose JavaScript SDK tracks pageviews, clicks and scrolls with servers in Japan and China.

[Block Ptengine until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Analytics](https://www.flowconsent.com/en/services/analytics)

- Consent

  Analytics

- Prior consent

  Required

- Documented cookies

  6

- Third-party domains

  6

- Servers

  Japan and China

Overview

## What does Ptengine do?

## **What is Ptengine**

Ptengine is a web analytics and customer engagement platform that combines pageview and event tracking with heatmaps (clicks, scrolls, attention) and on site personalisation. Originating from Japan and active in China and internationally, it is widely used by ecommerce and content publishers.

## **Data collected and how it works**

The Ptengine JavaScript SDK sets cookies prefixed with \_pt and records pageviews, custom events, click coordinates, scroll depth and mouse movement to generate heatmaps and session insights. Data is sent to Ptengine servers hosted in Japan and China.

## **GDPR considerations**

Ptengine clearly performs non essential analytics and behavioural tracking, requiring prior consent under Article 5(3) of the ePrivacy Directive and Article 6(1)(a) of the GDPR. Transfers to Japan benefit from the EU adequacy decision for private sector data, while transfers to China require Standard Contractual Clauses with strong supplementary measures.

## **Risks and mitigations**

Risks include detailed behavioural profiling through heatmaps, transfers to China where surveillance laws are wide, and possible exposure of form content if not masked. Mitigations include strict consent gating, enabling input masking, disabling session recording, anonymising IPs and signing a data processing agreement with appropriate transfer mechanisms.

## **Implementation best practices**

Load Ptengine through a consent management platform in the analytics and personalisation categories, only after the corresponding consent. Configure the SDK to mask input fields, exclude pages with sensitive content, set short retention, and document Japan and China transfers in your records of processing.

Compliance

## Ptengine and the GDPR

Ptengine is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Consent (GDPR Art. 6(1)(a)) and ePrivacy Directive Art. 5(3) for cookie storage

- Risk level

  high

- Applicable regulations

  GDPR, ePrivacy Directive, TTDSG, LIL, LOPDGDD

### Impact assessment (DPIA)

A DPIA is strongly recommended due to behavioural tracking through heatmaps, the use of personalisation, transfers to Japan and China and potential capture of input content. Document data flows, retention, transfer safeguards and mitigations such as input masking.

### Sample text for your banner

> We use Ptengine to understand how visitors use our website and to personalise content. This service stores cookies and transfers data to Japan and China. You can accept or refuse from our consent banner.

Cookies and trackers

## What Ptengine sets and contacts

- Tracking method

  JavaScript SDK that records pageviews, clicks, scroll depth, mouse movements for heatmaps, and supports on site personalisation, sending data to Ptengine servers in Japan and China.

- Server location

  Japan and China

- Data transferred outside the EU

  Personal data is transmitted to Ptengine servers located in Japan and China; transfers from the EU require Standard Contractual Clauses and supplementary measures, with Japan benefiting from a partial adequacy decision and China being subject to additional risk assessment.

### Cookies set (6)

| Name           | Type      | Duration   | Purpose                                                                                                |
| -------------- | --------- | ---------- | ------------------------------------------------------------------------------------------------------ |
| \_ptqs         | analytics | 30 minutes | Stores session state, last query string and referrer used by the Ptengine SDK for session attribution. |
| \_ptUvar       | analytics | 2 years    | Persistent visitor identifier used by Ptengine to recognise returning users across sessions.           |
| \_ptUseridvar1 | analytics | 2 years    | Custom user identifier set by Ptengine when the publisher provides a logged in user reference.         |
| \_ptHQID       | analytics | 1 year     | Heatmap identifier used by Ptengine to associate captured interactions with heatmap experiments.       |
| \_ptSeg        | marketing | 1 year     | Stores the audience segments computed by Ptengine to deliver personalisation rules.                    |
| \_ptUid        | analytics | 2 years    | Anonymous user identifier set by Ptengine for analytics aggregation.                                   |

### Third-party domains contacted (6)

- `ptengine.com`
- `ptengine.jp`
- `js.ptengine.com`
- `js.ptengine.jp`
- `api.ptengine.com`
- `ptengine.cn`

Questions

## Frequently asked questions about Ptengine

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does Ptengine set?

Ptengine sets first party cookies on the publisher domain prefixed with \_pt, including \_ptqs for queries and session state, \_ptUseridvar1 and \_ptUvar for the persistent visitor identifier, plus heatmap and session related cookies. These cookies enable analytics, heatmaps and personalisation and are not strictly necessary.

### Is user consent required before loading Ptengine?

Yes. Because Ptengine performs detailed behavioural tracking through heatmaps and personalisation, prior, free, specific and informed consent is required under Article 5(3) of the ePrivacy Directive and Article 6(1)(a) of the GDPR. The SDK must remain inactive until consent is granted.

### What is the legal basis for processing personal data via Ptengine?

The legal basis is the data subject consent under Article 6(1)(a) of the GDPR, combined with Article 5(3) of the ePrivacy Directive for cookies and similar technologies. Legitimate interests are not appropriate for behavioural tracking and personalisation of this type.

### Does Ptengine transfer data outside the EU?

Yes. Ptengine hosts data on servers located in Japan and China. Japan benefits from a partial EU adequacy decision for private sector data, while transfers to China must be covered by Standard Contractual Clauses with supplementary measures and a transfer impact assessment.

### Is a DPIA required when using Ptengine?

A DPIA is strongly recommended due to systematic behavioural monitoring, personalisation profiling, transfers to a non adequate country (China) and the possible capture of input content. The DPIA should describe data flows, retention, transfer mechanisms and mitigations.

### How do I correctly implement Ptengine in a GDPR compliant way?

Load Ptengine through a consent management platform with analytics and personalisation categories, enable input masking, exclude sensitive pages from heatmaps, reduce retention and sign a data processing agreement with appropriate transfer mechanisms. Inform users clearly about Japan and China hosting.

### Are there privacy friendly alternatives to Ptengine?

Privacy oriented alternatives include Matomo with EU hosting and on premise heatmaps, Mouseflow EU, Contentsquare with EU configuration and Hotjar EU. These tools provide heatmaps, recordings and analytics with EU data residency and stronger data minimisation options.

### How should I update my cookie policy to mention Ptengine?

Add Ptengine in your cookie policy under analytics and personalisation with the \_pt cookies, durations and purposes. Indicate that data is processed by Ptengine on servers in Japan and China, mention the applicable transfer mechanism and link to the Ptengine privacy policy.

Same category

## More services: Analytics

[See the whole category](https://www.flowconsent.com/en/services/analytics)

### [Etracker](https://www.flowconsent.com/en/services/analytics/etracker)

[Etracker is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Etracker offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Etracker empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/etracker)

[Analytics](https://www.flowconsent.com/en/services/analytics/etracker)

·

### [Pingdom Uptime Monitoring](https://www.flowconsent.com/en/services/analytics/pingdom-uptime-monitoring)

[Pingdom Uptime Monitoring is a website monitoring and uptime tracking solution that ensures your digital properties remain available and performant around the clock. It provides real-time alerts, status page hosting, and detailed performance reports. Pingdom Uptime Monitoring monitors websites, APIs, and servers from multiple global locations, detecting downtime and degradation before they impact users. With incident management and SLA tracking, Pingdom Uptime Monitoring helps maintain reliability and trust.](https://www.flowconsent.com/en/services/analytics/pingdom-uptime-monitoring)

[Analytics](https://www.flowconsent.com/en/services/analytics/pingdom-uptime-monitoring)

·

### [Genezio](https://www.flowconsent.com/en/services/analytics/genezio)

[genezio is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. genezio offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, genezio empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/genezio)

[Analytics](https://www.flowconsent.com/en/services/analytics/genezio)

·

### [Spinnakr](https://www.flowconsent.com/en/services/analytics/spinnakr)

[Spinnakr is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Spinnakr offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Spinnakr empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/spinnakr)

[Analytics](https://www.flowconsent.com/en/services/analytics/spinnakr)

·

### [Twitter Analytics](https://www.flowconsent.com/en/services/analytics/twitter-analytics)

[Twitter Analytics is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Twitter Analytics supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Twitter Analytics enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/twitter-analytics)

[Analytics](https://www.flowconsent.com/en/services/analytics/twitter-analytics)

·

### [Triple Whale](https://www.flowconsent.com/en/services/analytics/triple-whale)

[Triple Whale is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Triple Whale offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Triple Whale empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/triple-whale)

[Analytics](https://www.flowconsent.com/en/services/analytics/triple-whale)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)