Both auto-capture events, but with fundamentally different philosophies. The complete 2026 comparison.
Heap pioneered auto-capture analytics -- the idea that you should capture everything and define events retroactively. ClickStream shares the auto-capture philosophy but takes it further: instead of just recording what happened, ClickStream scores every interaction in real-time with 26 behavioral models, resolves identity with first-party cookies, and keeps all your data in your own infrastructure.
| Feature | Heap | ClickStream |
|---|---|---|
| Auto-Capture Philosophy | Captures DOM interactions (clicks, pageviews, form submissions, page changes). Retroactive event definition lets you define events from historical data. | Auto-captures and scores in real-time. Every interaction is captured, enriched with behavioral context, and scored by 26 models at the edge. No retroactive definition needed. |
| Session Replay | Full session replay with DOM reconstruction. Watch exactly what users saw and did. Powerful for UX debugging and understanding individual sessions. Session replay is a core Heap feature. | Session replay included, but ClickStream's primary focus is real-time behavioral intelligence. 26 edge-computed scoring models automatically quantify what happened across every session — rage clicks, scroll depth, engagement, form friction — so you get actionable insights at scale without watching recordings. |
| Privacy & PII Handling | Captures DOM elements by default, which can include PII (names, emails, addresses visible on screen). Requires manual PII scrubbing configuration. Data sent to Heap's servers. | PII scrubbed at the edge before storage. First-party architecture keeps data in your infrastructure. Privacy by design, not by configuration. |
| Identity Resolution | Requires SDK integration or API calls to identify users. Anonymous visitor tracking relies on cookies with limited cross-session persistence. Identity stitching available but requires known user IDs. | First-party cookie architecture with industry-leading identification rate. Multi-signal identity graph resolves visitors across sessions and devices without requiring login or SDK integration. |
| Behavioral Intelligence | Retroactive event definition and funnel analysis. No real-time behavioral scoring. Insights come from analyzing historical patterns manually. | 26 edge-computed scoring models in real-time: engagement, intent, churn risk, rage clicks, scroll depth intelligence, content affinity, conversion readiness, bot detection, and more. |
| Data Ownership | Data stored on Heap's infrastructure. Export available through integrations and APIs. No option for self-hosted storage. | Data stored securely on ClickStream-managed infrastructure. Full portability via Parquet export anytime. Zero egress fees. |
| Real-Time Processing | Near-real-time event ingestion. Retroactive event definition adds latency to new analyses. Dashboard queries run against processed data. | True real-time via WebSocket. Sub-second event delivery with behavioral scores computed at the edge. No processing delay for new insights. |
| Pricing Model | Per-session pricing. Costs scale with session volume. Free tier limited. Growth and Pro tiers can reach $50K-$150K+/year for high-traffic sites. | Usage-based pricing on Cloudflare infrastructure. All features included at every tier. No per-session cost cliffs. Linear scaling with traffic. |
| Retroactive Analysis | Core strength. Define events retroactively from captured DOM data. Ask questions about historical data without pre-planning event taxonomy. | All events captured with full context from the start. Behavioral scores are computed in real-time and stored historically. Rich event data enables flexible querying without retroactive definition. |
| Data Weight / Performance | DOM capture is heavyweight -- recording page structure, element positions, and visual state requires significant data transfer and storage. | Edge-first architecture. DOM capture for session replay with PII scrubbed at the edge before storage. Plus lightweight behavioral scoring that runs on interaction signals in real time — richer context with a smaller footprint. |
| Interaction Tracking | Auto-captures DOM interactions (clicks, pageviews, form submissions). No granular behavioral signal capture beyond DOM events. | 8 SDK interaction trackers: hover intent, clipboard monitoring, text selection, scroll regression, mouse dynamics, CTA proximity, form field intelligence, and tab visibility tracking. |
Both ClickStream and Heap share the fundamental belief that you should capture all user interactions automatically, without requiring manual event instrumentation. But what they do with the captured data is fundamentally different.
Heap's innovation was the concept of retroactive event definition. By capturing the entire DOM state and all interactions, Heap allows you to:
This approach is powerful for teams that want flexibility in their analytics, but it comes with trade-offs: heavy data collection, potential PII exposure, and no real-time intelligence on the captured data.
ClickStream captures interactions and DOM state, but the primary value is in real-time behavioral intelligence:
The key philosophical difference: Heap asks "What did the user do?" and lets you figure out what it means later. ClickStream asks "What did the user do, what does it mean, and what should we do about it?" -- all in real-time.
Both ClickStream and Heap include session replay. It's a useful qualitative tool that lets you:
For Heap, session replay is a core pillar of the product. For ClickStream, it's included but not the primary focus — because session replay alone has significant limitations as an analytics tool:
ClickStream's primary differentiator is quantitative behavioral intelligence. Rather than relying on manual replay review, it automatically scores what every session means:
The result: you can use session replay when you need the qualitative deep-dive, but ClickStream's 26 behavioral scores let you analyze 50,000 sessions with statistical confidence — no watching required. It's the difference between a tool built around replay and a platform built around real-time intelligence that also includes replay.
Heap's DOM capture approach creates an inherent privacy tension. Because Heap records the visual state of the page, it captures whatever is displayed on screen. This includes:
Heap provides tools to suppress PII capture (CSS selectors to mask elements, API methods to redact fields), but this requires proactive configuration. The default is to capture everything, and PII prevention is opt-in rather than opt-out. This creates ongoing compliance risk, especially as pages change and new PII-containing elements are added.
ClickStream captures DOM for session replay but eliminates the PII problem architecturally:
For organizations in regulated industries (healthcare, finance, education) or those operating under GDPR, CCPA, or similar regulations, ClickStream's edge-scrubbing approach means you get session replay without the compliance risk that Heap's default-capture-everything model creates.
Heap identifies users through a combination of:
heap.identify() with a known user ID when a user logs inheap.addUserProperties()This means Heap's identity resolution is fundamentally dependent on your application code. Anonymous visitors get a session ID, but cross-session identity stitching only works when:
identify call that links the anonymous ID to a known userFor marketing websites, landing pages, and pre-login experiences, Heap has limited ability to identify returning visitors.
ClickStream identifies visitors automatically, without any SDK integration or code changes:
Heap stores all captured data on their infrastructure. Given that DOM capture generates significant data volumes, this has cost implications:
ClickStream's edge-first architecture combined with Cloudflare's cost-efficient infrastructure means:
Quantitative behavioral intelligence across every visitor, not qualitative replay of a few.
GET EARLY ACCESS