VulpaSoft — Privacy-first behavioral analytics

Most behavioral analytics tools depend on cookies to work. That means consent banners, incomplete data from visitors who opt out, and personal information captured in session replays without masking.

VulpaSoft takes a different approach.

We built a complete behavioral analytics platform that operates without cookies, without consent banners, and without collecting personal data. Every visitor is captured. Every interaction is tracked. Privacy is handled at the architecture level.

What you get:

– Behavior maps — click, movement, and engagement overlays on your live pages

– Session replays — real user sessions with PII masked automatically before data leaves the browser

– Scroll maps — see exactly where attention drops, with fold detection per device

– Friction scores — automatic detection of rage clicks, dead clicks, and erratic behavior

– Click-through detection — finds z-index bugs and overlapping elements that block interactions

– Form analytics — field-level drop-off and hesitation tracking

– Traffic sources — full UTM attribution across all features

Under the hood: sessions are identified using a daily-rotating SHA-256 hash. No cookies, no fingerprinting, no IP stored. PII is masked client-side before reaching our servers. 16 privacy measures are built into the architecture.

Infrastructure is 100% EU-hosted. Public DPA included. Script under 5KB gzipped, async loading, zero impact on Core Web Vitals.

Compliant with GDPR, CCPA, PECR, and the ePrivacy Directive.

Free plan available, no credit card required.

We’d love your feedback — what features matter most in your analytics workflow? What would make you switch from your current tool?