What is recorded automatically
The tag records interactions on its own, with no markup to add — and leaves typed values alone unless you explicitly enable form draft capture.
Captured on every page
- click
- Any link, button, or element with a button role — labelled by its text or aria-label
- outbound_click
- A link leaving your domain, named by the destination host
- social_click
- A link to a social network, named by the network
- call_click
- A tel: link tapped
- email_click
- A mailto: link tapped
- form_start
- The first field of a form focused — intent, before anyone submits
- form_submit
- A form submitted
- scroll_depth
- 25%, 33%, 50%, 75% and 100% of a page reached, once each
- js_error
- An uncaught script error, kept out of the visitor breakdowns
Route changes in single-page apps are recorded as pageviews too, so an app that never reloads still reports every screen.
What autocapture does not read
Typed field values. Default autocapture does not read them. Optional form draft capture reads only the field names you explicitly allow in data-draft-fields. Forms connected through submitLead explicitly send the values your integration supplies. Fields that look sensitive — password, email, telephone, card, and similar — have their labels suppressed as well, so a placeholder cannot leak into an event name. Clicking a text field records nothing at all.
How events are sent
Autocapture produces far more events than pageviews did, so they queue and go out in batches: every four seconds, whenever twenty have collected, and once more via sendBeacon as the visitor leaves. That last send matters — a visit’s final actions are usually the interesting ones.
Turning it off
Add data-autocapture="off" to the script tag. Pageviews, leads and your own named events keep working.
<script defer src="https://pulse.ninee.studio/t.js" data-site="YOUR_SITE_KEY" data-autocapture="off"></script>Optional form drafts
Add data-draft-fields to your installed script to allow specific HTML field names, such as name,email,phone,interest. Snapshots are sent after a pause in typing and when the page becomes hidden. Zowar keeps the latest snapshot, not a keystroke log. They appear only in authenticated visit details. Existing visits cannot be backfilled.
<script defer src="https://YOUR_ZOWAR_HOST/t.js" data-site="YOUR_SITE_KEY" data-draft-fields="name,email,phone,interest"></script>Do not allow sensitive fields. Password forms, hidden inputs, payment and sensitive identity fields are excluded. Mark a field or form data-zowar-private to exclude it. Remove data-draft-fields to stop capture. Explain pre-submission collection in your privacy notice and apply your consent requirements before loading the tag.