---
title: Product Analytics - Web
description: Requirements to use the Product Analytics module
lastUpdated: 17 December 2025
source_url:
  html: https://docs.contentsquare.com/en/web/product-analytics/
  md: https://docs.contentsquare.com/en/web/product-analytics/index.md
---

> Documentation index: https://docs.contentsquare.com/llms.txt
> Use this file to discover all available pages before exploring further.

Heap App users

This section covers Product Analytics support in the Contentsquare Tracking Tag.

If you're using the [Heap app ↗](http://heapanalytics.com/app), refer to the [Heap Web tracking docs ↗](https://developers.heap.io/docs/web).

As of June 2024, Contentsquare users can take advantage of Product Analytics capabilities.

Product Analytics (PA) captures and visualizes user interactions across web, mobile, and other platforms, providing insights into user behavior and engagement. This data helps identify user preferences, pain points, and behavior patterns, allowing for the improvement and optimization of the digital experience.

For more information, see [our product ↗](https://contentsquare.com/platform/product-analytics/) and [plans and pricing ↗](https://contentsquare.com/pricing/) pages

## Requirements and impacts on the Tag

### Dedicated script

When Product Analytics is enabled, the CS tag loads the PA project configuration from `https://cdn.us.heap-api.com/config/<ENV_ID>/heap_config.js`, which then loads the PA tag `heap.js`.

The PA tag captures data in sync with the CS Tag.

Impacts on SRI

If you are using [SRI](https://docs.contentsquare.com/en/web/sri/), reach out to your Contentsquare contact for more information.

### CSP

If you enforce a Content Security Policy, include both CS and PA directives in your trusted sources list for script execution:

1. See [Content Security Policy](https://docs.contentsquare.com/en/web/content-security-policy/) for CS Tag directives.
2. See [Heap's CSP documentation ↗](https://developers.heap.io/docs/web#content-security-policy-csp) for PA directives based on your data center region (US or EU).

### Privacy

Masking or encrypted elements defined for Contentsquare tracking tag not to capture Personal Data as part of the Session Replay feature will also be enforced by the PA tag to avoid capturing Personal Data in PA systems. See [Personal Data Handling](https://docs.contentsquare.com/en/web/personal-data-handling/).

If your project has IP-less mode enabled, IP processing will be disabled on the PA Tag.

Data deletion option can be performed in both CS and PA upon request.

### Cookies

The PA Tag will create [additional cookies](https://docs.contentsquare.com/en/web/cookies/#product-analytics-cookies), prefixed with `_hp*`.