Is a website recording your screen right now?
When you visit some websites, a tool runs in the background that records everything you do on the page. Every tap. Every scroll. Every time you type something. Every time you pause and think. The website owner can replay this recording later and watch exactly what you did — like a video of your visit.
How it works
These tools are called session recording or session replay tools. The most common ones are Microsoft Clarity (free, made by Microsoft), Hotjar, and FullStory. When a website installs one of these tools, it captures your mouse movements, clicks, scrolls, and text input. The recording is sent to the tool company's servers.
The website owner logs in to a dashboard and can watch your visit like a video. They see which buttons you clicked, where you got confused, where you hesitated, and what you typed (except passwords, which are usually masked).
Why this matters
On a shopping website, the recording shows what products you looked at, what you added to cart, and what you removed. On a health website, it shows which doctors you searched for and which conditions you looked up. On a finance website, it shows which stocks you researched and how much money you considered investing.
Most people do not know this is happening. Most privacy policies do not mention it clearly. You never see a pop-up saying "we are recording your screen right now."
How to check if a website is recording you
Open the website in Chrome. Press F12 to open Developer Tools. Click the Network tab. Reload the page. Search for "clarity.ms" (Microsoft Clarity), "hotjar.com" (Hotjar), or "fullstory.com" (FullStory). If you see requests going to these domains, the website is recording your visit.
You can also check the privacy policy. Search for "session recording," "session replay," "screen recording," or "Microsoft Clarity." If none of these words appear, the company may be recording you without telling you.
46 of 107 Indian websites we checked had screen recording active.
Microsoft Clarity was the most common screen-recording tool we found. The public tracker table marks these visit-recording tools as disclosure gaps when the tracker was visible in evidence but not clearly named in the privacy policy. This includes health platforms where people look up medical conditions and finance platforms where people research investments.
See the Microsoft Clarity tracker page →How many trackers run on your pages? Does your privacy policy name them? Can you answer a data-rights email? If you don't know, we can help you find out.
Talk to Meridian Bridge Strategy →Your personal data belongs to you. Under DPDP, every company must tell you what they have and delete it if you ask. One email is all it takes.
Get the template email →We investigated 107 Indian company websites. The public report shows what we found.