482 of the Alexa top 50,000 sites are recording their users’ every moves, keystrokes and mouse movements. This data is then sent to an analytics dashboard, not all times in a secure manner. An attacker could intercept this data in transit, or steal it from unsecured analytics dashboards to extract sensitive information. Some of the most intrusive session tracking scripts are provided by services such as FullStory, Hotjar, Yandex, and Smartlook, which appeared to log everything the user did on a page.
Source: https://www.bleepingcomputer.com/news/technology/popular-websites-are-recording-your-every-move/