Privacy-first design
What happened, never who.
Heatwave was designed from day one to answer “where do shoppers struggle?” without knowing who any shopper is. Here's exactly how.
- 01
In the shopper's browser
Heatwave waits for Shopify's consent signal. Global Privacy Control and Do Not Track always mean no tracking. Typing, hidden fields, emails, phone numbers, address and account areas, and embedded frames are masked before anything is sent.
- 02
On arrival
The IP address is used once to look up the country, then thrown away. Tokens, customer IDs and emails are stripped from page addresses, referrers and campaign tags.
- 03
In storage
Data is grouped by an anonymous visitor ID that isn't linked to a name or Shopify customer. It's encrypted and deleted automatically when your plan's history period ends.
- 04
In AI analysis
The AI sees page screenshots from our own browser, aggregated numbers and short anonymous visit summaries. Never identities, and never used to train models.
Never collected
- ✕Names, email addresses, phone numbers or postal addresses
- ✕Anything typed into forms, search boxes or the cart note
- ✕Passwords, card numbers or any payment details
- ✕IP addresses (only the visitor's country is kept)
- ✕Customer accounts, order details or anything from Shopify checkout pages
- ✕Shoppers who decline analytics cookies or use Global Privacy Control
What you control
Mask more
Add any element to the mask list in Settings, for example a loyalty widget.
Exclude pages
Keep Heatwave off any page by path, like /pages/private-sale.
Set the share
Choose what share of visitors is tracked and recorded, within your plan.
Delete everything
One button in Settings. Uninstalling deletes everything within 48 hours.
The fine print: Privacy policy ·DPA ·Sub-processors ·Text for your store's privacy policy
Your shoppers are already telling you.
Start listening today. Free plan, two-minute setup, and your first heatmaps within the hour on a busy store.