The Court of Justice of the European Union (CJEU) has struck down the EU-US Privacy Shield Framework. This means that data controllers in the European Union (EU) can no longer rely on certifications of data recipients in the United States (US) under the Privacy Shield to justify the transfer of personal data from the EU to the US.
Since Hotjar is a company registered in the European Union, it never needed to obtain a certification under the EU-US Privacy Shield framework. Hotjar is regulated by and follows European legislation in relation to data transfers.
Furthermore, all data Hotjar collects is stored electronically in Ireland, Europe on the Amazon Web Services infrastructure, eu-west-1 datacenter.