> Zoho PageSense runs analytics, heatmaps and session recordings that need consent. How to use it under the GDPR with EU hosting and input masking. > > Canonical: https://www.flowconsent.com/en/services/personalization/zoho-pagesense Personalization # Zoho PageSense Analytics Zoho PageSense is a conversion optimisation tool offering analytics, heatmaps, A/B testing and session recording, setting cookies and capturing detailed visitor behaviour. [Block Zoho PageSense until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=personalization) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Personalization](https://www.flowconsent.com/en/services/personalization) - Consent Analytics - Prior consent Required - Documented cookies 2 - Third-party domains 3 - Servers Choice of data centre including the European Union (Zoho Corporation) Overview ## What does Zoho PageSense do? ## **What it is** Zoho PageSense is a web analytics and conversion optimisation product from Zoho Corporation. It combines funnel and goal analytics, heatmaps, A/B testing, personalisation and session recordings to show how visitors use a site. Zoho lets customers choose the hosting region, including a European Union data centre. ## **Cookies and data it collects** PageSense sets cookies to identify visitors, keep them in consistent test variations and link sessions. It records the visitor IP address, pages, clicks, scrolling and, when session recording is enabled, a replay of on page interactions. Heatmaps and recordings can capture detailed behavioural data and must be configured to mask sensitive fields. ## **GDPR and ePrivacy implications** The analytics, heatmap, testing and recording cookies are non essential and require consent under Article 5(3) of the ePrivacy Directive. Session recordings in particular can capture personal data shown on the page, so masking and careful configuration are important under the GDPR. ## **Consent requirements** Obtain consent before PageSense loads its cookies and starts recording, and tell visitors that their on page behaviour may be recorded. Use input masking so that form fields and personal details are never captured. Make refusal as easy as acceptance. ## **Data transfers** Zoho is headquartered outside the EU but offers a European data centre. If you select the EU region, visitor data stays in the EU. Choosing a United States or other region introduces a transfer that needs Standard Contractual Clauses or the EU US Data Privacy Framework. ## **Practical compliance steps** Choose the EU data centre, enable input masking for session recordings, gate PageSense behind consent and document the cookies and any transfer. Limit recording to what you need and set short retention periods for heatmaps and recordings. Compliance ## Zoho PageSense and the GDPR Zoho PageSense is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent under Article 6(1)(a) GDPR for analytics, heatmaps and session recording - Risk level medium - Applicable regulations GDPR, ePrivacy Directive ### Impact assessment (DPIA) A DPIA is recommended when session recording or heatmaps capture behaviour at scale, because they can reveal detailed personal data. Assess the masking settings, the data centre region and retention periods. ### Sample text for your banner > We use Zoho PageSense for analytics, heatmaps and session recordings to improve our site. These set cookies and record your on page behaviour only if you accept. Cookies and trackers ## What Zoho PageSense sets and contacts - Tracking method JavaScript analytics, heatmap, A/B testing and session recording with cookies - Server location Choice of data centre including the European Union (Zoho Corporation) - Data transferred outside the EU Zoho lets you choose the data centre region, including the European Union. If you select the EU data centre, data stays in the EU. Other regions, such as the United States or India, would involve transfers governed by Standard Contractual Clauses or the EU US Data Privacy Framework. ### Cookies set (2) | Name | Type | Duration | Purpose | | ----------------- | --------- | ---------- | ---------------------------------------------------------------------------------------------------------------------- | | pagesense-visitor | Analytics | 1 year | Assigns a unique identifier so PageSense can recognise returning visitors and keep them in consistent test variations. | | pagesense-session | Analytics | 30 minutes | Links page views into a single session for analytics, heatmaps and recordings. | ### Third-party domains contacted (3) - `zohopagesense.com` - `cdn.pagesense.io` - `pagesense.io` Questions ## Frequently asked questions about Zoho PageSense Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Does Zoho PageSense set cookies? Yes, it sets cookies to identify visitors, keep them in consistent test variations and link sessions, alongside recording behaviour. These cookies are non essential. ### Do I need consent? Yes, the analytics, heatmap, testing and session recording cookies and processing require prior consent before PageSense loads. ### What is the legal basis? Consent under Article 6(1)(a) of the GDPR, together with the ePrivacy consent rule, is the appropriate basis for analytics, heatmaps and session recordings. ### Does it transfer data outside the EEA? Only if you choose a non EU data centre. Zoho offers an EU region that keeps data in the EU; other regions need Standard Contractual Clauses or the EU US Data Privacy Framework. ### Do I need a DPIA? A DPIA is recommended where session recording or heatmaps capture behaviour at scale, as they can reveal detailed personal data. Assess masking, region and retention. ### How do I implement it compliantly? Select the EU data centre, enable input masking, gate PageSense behind consent, set short retention and document the cookies and any transfer. ### Are there alternatives? European heatmap and analytics tools, and EU hosted session recording products, can keep data in the EU. The right choice depends on your optimisation needs. ### How do I update my cookie policy? List the PageSense cookies with purpose and duration, explain that analytics, heatmaps and recordings run only after consent, and note the data centre region and any transfer. Same category ## More services: Personalization [See the whole category](https://www.flowconsent.com/en/services/personalization) ### [Karte](https://www.flowconsent.com/en/services/personalization/karte) [Karte is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Karte supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Karte enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/personalization/karte) [Analytics](https://www.flowconsent.com/en/services/personalization/karte) · ### [Personizely](https://www.flowconsent.com/en/services/personalization/personizely) [Personizely is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Personizely provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Personizely helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/personalization/personizely) [Preferences](https://www.flowconsent.com/en/services/personalization/personizely) · ### [Varify](https://www.flowconsent.com/en/services/personalization/varify) [Varify is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Varify supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Varify enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/personalization/varify) [Analytics](https://www.flowconsent.com/en/services/personalization/varify) · ### [Visitor.js](https://www.flowconsent.com/en/services/personalization/visitor-js) [Visitor.js is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Visitor.js enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Visitor.js empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/personalization/visitor-js) [Preferences](https://www.flowconsent.com/en/services/personalization/visitor-js) · ### [ParticularAudience](https://www.flowconsent.com/en/services/personalization/particularaudience) [ParticularAudience is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. ParticularAudience provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, ParticularAudience helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/personalization/particularaudience) [Preferences](https://www.flowconsent.com/en/services/personalization/particularaudience) · ### [Blendee](https://www.flowconsent.com/en/services/personalization/blendee) [Blendee is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Blendee provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Blendee helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/personalization/blendee) [Marketing](https://www.flowconsent.com/en/services/personalization/blendee) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)