Incode Heatmap
Self-hosted heat maps: clicks, mouse movement and scroll depth, stored in your own database. Privacy-first, no third-party services.
Solid choice
Incode Heatmap is a solid plugin choice in 2026, with a few things worth checking first. Was last updated 3 weeks ago, and scores 64/100 on our health check.
- Actively developed — last update 3 weeks ago
- Tested with the latest WordPress (7.1)
- Small user base (<10 active installs)
- Very few reviews so far
How does it stack up?
Side-by-side on installs, updates, ratings & supportDaily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where Incode Heatmap stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| analytics | >100 |
| click tracking | >100 |
| conversion | >100 |
| heatmap | #48 |
| scrollmap | #3 |
About Incode Heatmap
From the official readme · v0.6.5Description
Incode Heatmap shows you how visitors really use your pages — where they click, where they
hesitate and how far down they read — and keeps every measurement in your own WordPress
database. No account, no external service, no data leaving your server.
The heavy work happens in the administrator’s browser, on demand: aggregating points and
painting the map. On the front-end there is only a small, deferred, consent-aware tracker,
so real visitors pay virtually nothing for it.
What you get
- Click heat map and mouse-movement heat map.
- Scroll-depth map: see the line where readers drop off.
- “Confetti” view: every click coloured by the moment it happened.
- Device segmentation (desktop / tablet / mobile) — separate maps, because they rarely agree.
- Configurable sampling, so the database does not balloon on a busy site.
- Consent aware: Complianz, Cookiebot and Google Consent Mode v2 are detected automatically,
plus Do-Not-Track. - Input masking: nothing typed into a form is stored.
- Front-end viewer: the heat is painted over your live page, in its real context — not on
a screenshot inside the dashboard. - Automatic retention with a daily cleanup job.
- A setup wizard and an in-plugin quick guide, so the first map takes a couple of minutes.
No limits
Everything above is in this plugin, free and without limits: no caps on pages, on
events, or on how long you keep them. Nothing is locked, metered or timed out.
How it works
The tracker batches events and sends them with navigator.sendBeacon to a REST endpoint on
your own site. Coordinates are stored resolution-independently, so a map recorded on a 4K
monitor lines up with one recorded on a laptop. Nothing is computed on the visitor’s page
beyond collecting the events; rendering happens only when an administrator opens a map.
Privacy
Incode Heatmap stores behavioural data (clicks, mouse movement and scroll depth) on your own
server only. It does not collect names, email addresses or IP addresses, and text typed
into form fields is masked. Capture runs only after consent when a consent banner is
present, and honours the browser Do Not Track signal. Data is deleted automatically after
the retention period you configure. The plugin registers suggested privacy-policy text and
integrates with WordPress’ personal-data export and erase tools.
Installation
- Upload the
incode-heatmapfolder to/wp-content/plugins/, or install the ZIP from
Plugins → Add New → Upload Plugin. - Activate it. The setup wizard asks three questions and leaves the plugin measuring.
- Open any page of your site as an administrator and use the “Heatmap” button in the
admin bar to see the map over that page.
Frequently asked questions
Does this send my visitors’ data to a third party?
No. Everything is stored in your WordPress database and never leaves your server.
Will it slow down my site?
The front-end tracker is a few KB, loads deferred after everything else and sends batched events. All aggregation and rendering happens in the administrator’s browser, on demand, so regular visitors do not pay for it.
Is it GDPR compliant?
It is built to respect consent: it can require analytics consent (Complianz, Cookiebot, Consent Mode v2), honours Do-Not-Track, masks form input, stores no personal identifiers and deletes data after a retention period you choose. Compliance also depends on how you configure and disclose it on your own site.
I browse my site and no data shows up.
Administrators and editors are excluded on purpose, so your own browsing does not pollute the data. Open the page in a private window to test it.
How do I exclude certain pages or roles?
Excluded roles (administrators and editors by default) are never tracked, and you can list URL patterns to include or exclude from the settings screen.
How long is the data kept?
As many days as you set under Retention (60 by default). A daily task deletes anything older on its own.
Changelog
Scroll history is now kept per day so retention prunes it properly. The database update runs on its own the first time you load the dashboard.
0.6.5
- Fixed: if a second copy of the plugin code is active at the same time, it now stays idle instead of stopping the site with a fatal error.
0.6.4
- Renamed to Incode Heatmap for the WordPress.org directory.
0.6.3
- Housekeeping only: no user-visible changes in this edition.
0.6.2
- Admin notices shown on the plugin screens are readable again: they were
inheriting the white text of the header and came out white on white. - The “Privacy decided” line of the setup checklist now describes the privacy
settings you actually have. It used to claim consent was required and
Do-Not-Track honoured even when both were switched off.
0.6.1
- A missing plugin file no longer takes the whole site down: the modules are
checked before they are loaded, and if any is missing the plugin stays inert
and says so in the dashboard instead of throwing a fatal error.
0.6.0
- Scroll history is now stored per day, so retention prunes it like everything
else instead of keeping one ever-growing row per page. - Internal: schema version 3, applied automatically on update.
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best Incode Heatmap alternatives
All analytics plugins →FAQ
Incode Heatmap: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 20, 2026
Is Incode Heatmap free?
Yes. Incode Heatmap is free to download and use from the official WordPress.org plugin directory.
Is Incode Heatmap safe to use in 2026?
Incode Heatmap is a solid plugin choice in 2026, with a few things worth checking first. Was last updated 3 weeks ago, and scores 64/100 on our health check.
How many websites use Incode Heatmap?
Incode Heatmap is active on <10 WordPress websites and has been downloaded 134 times since it launched in September 2026. It was downloaded 138 times in the last 30 days.
Does Incode Heatmap work with WordPress 7.1?
Yes. The developer has tested Incode Heatmap up to WordPress 7.1.3, the latest release. It requires WordPress 5.8 or newer.
What PHP version does Incode Heatmap need?
Incode Heatmap requires PHP 7.4 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was Incode Heatmap last updated?
The latest version, 0.6.5, was released on September 27, 2026 (3 weeks ago).
Who makes Incode Heatmap?
Incode Heatmap is developed and maintained by Adrian Alcala.
What are the best alternatives to Incode Heatmap?
The most popular alternatives to Incode Heatmap are Site Kit by Google (5M+ installs), MonsterInsights (2M+ installs) and WP Statistics (500K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card




