First-party visitor intelligence

Find out who, or what, is really visiting your site.

ClickStream is the platform that identifies every visitor on your website – real people, AI crawlers, bots – classifies them all in real time, scores their intent, and gives your site the intelligence to respond.

Powered by a five-layer identity graph and 26 edge-computed behavioral models.

Start free

One-tag install. No credit card required.

See how it works

The problem with web analytics today

Over 50% of your traffic isn’t human. Are you basing big decisions on bad data?

You see the numbers. But what do they actually mean?

Standard analytics count page views. They can't separate real people from AI crawlers, search bots, scrapers, and click-fraud bots inflating your numbers — so every hiring plan, ad budget, and board presentation built on that data is built on noise.

Figures reflect independent industry research on bot traffic and cross-device behavior.

What your traffic really looks like

Not all visitors are equal, and most tools can't tell them apart.

Hover or tap a segment of this illustrative mix — drawn from industry bot-traffic research — to see what it is and what to do about it.

  • Real humans
  • AI crawlers
  • Search bots
  • Harmful bots
  • Other bots

55%

Real humans

Your actual customers and prospects: the only traffic that can buy from you. Resolve them to people and score their intent.

Welcome

ClickStream labels every single visitor so you welcome the valuable ones, stop the harmful ones, and make decisions on real data. Not blind blocking. Intelligent classification.

The aha moment

The numbers change everything.

Here's what the first 30 days can look like — an illustrative before and after.

  • Before ClickStream 50,000 visitors reported
    After ClickStream 34,500 confirmed human visitors
  • Before ClickStream 1.8% conversion rate
    After ClickStream 2.6% true human conversion rate
  • Before ClickStream $40k monthly ad spend, going to bots
    After ClickStream $27k now targeting real human traffic
  • Before ClickStream ??? of traffic is real humans
    After ClickStream 31% non-human, now classified & addressed

That gap isn’t a rounding error — it’s the difference between thinking your marketing is failing and knowing it’s working.

Getting Started

Live Before Lunch

Drop a single script tag on your site — a 344-byte bootstrap with a permanent integrity hash — and point one CNAME record (plus a TXT validation record if Cloudflare asks). Most sites are live in minutes once DNS propagates, with capabilities that used to require four separate enterprise tools.

Once you’re live

From anonymous visitor to known customer... automatically.

The pixel's in. Here's what happens to every visitor who lands — automatically, in real time, no data-science team required.

  1. Step 1 | Classify

    A visitor arrives, and gets identified for what they are.

    The instant someone lands, ClickStream reads identity signals and labels them: confirmed human, AI agent, search crawler, scraper, or stealth bot — each with a confidence score. Not blind blocking. Intelligent classification, without slowing your page down.

    • 11 bot categories
    • Confidence score
    • No page slowdown

  2. Step 2 | Resolve

    Identity layers stack into one real person

    For real people, signals layer on as they browse, click an ad, submit a form, or return on another device — until anonymous traffic resolves into a single unified profile. Recognized across devices and sessions, no login required.

    • Cross-device match
    • Deterministic + probabilistic
    • Confidence-banded merges

  3. Step 3 | Score

    Behavior gets scored in real time

    While they're still on the page, 26 models score each visitor's purchase intent, frustration, churn risk, and more — inside a 3-millisecond-per-event budget our CI enforces, at the edge. You know who's ready to buy and who's about to leave.

    • 26 models
    • <3ms CI-enforced budget
    • 11 signals per event

  4. Step 4 | Respond

    Your site acts on it, automatically.

    With the @clickstreamhq/signals library (developer preview), your code responds in the moment: show a high-intent visitor an offer, help a frustrated one before they churn, or route a bot to verification. Real people see a better experience; bots hit a wall.

    • getVisitor()
    • React hooks
    • Real-time response

The dashboard

Analytics you can actually read.

No more staring at tables of numbers that don't mean anything. ClickStream shows you who came, where from, and what made them convert.

  • Visitors as people. Known, probabilistic, and anonymous — each clearly labeled.
  • Campaigns that show real customers, not just traffic.
  • Real-time. No sampling. No 24-hour delays.
  • Export to your stack — CSV self-serve on Growth+, warehouse-ready Parquet exports on request. No lock-in.
  • Jordan M. Returning · 3 devices Human 92
  • Anonymous Probabilistic · 1 session Human 61
  • GPTBot AI crawler · OpenAI AI No score
  • Unknown script Datacenter IP · burst Harmful 3

The identity graph

Five layers of signal. One complete picture.

No single signal covers everyone — which is exactly why stacking layers matters. Select a layer to see how it contributes.

Resolved

Visitor profile

one person

How it’s set
Server-side on your own subdomain
Lifespan
Up to 400 days — the browser maximum — because it’s set server-side
Captures
Every page visit, session, and event tied to one visitor ID.
Limitation
Doesn’t cross devices on its own — that’s what the other layers are for.

The signals library

A website that thinks.

@clickstreamhq/signals puts real-time visitor intelligence directly in your code — typically a 50–150ms round trip. Now in developer preview.

signals.js 
// @clickstreamhq/signals
import { configure, getVisitor,
         isHighIntent, isFrustrated, isBot } from '@clickstreamhq/signals';

configure({ apiKey: 'cs_live_...' });
const visitor = await getVisitor();

// High intent? Show them an offer.
if (isHighIntent(visitor)) {
    showOffer("Limited-time deal");
}

// Frustrated? Trigger help.
if (isFrustrated(visitor)) {
    triggerHelpChat();
}

// Bot? Route to verification.
if (isBot(visitor)) {
    requireVerification();
}

  • High-intent detection

    When purchase intent crosses your threshold, show a personalized offer or upgrade prompt — at the exact right moment.

  • Frustration mitigation

    Spot struggling visitors before they leave. Trigger live support, a simpler path, or a direct help offer.

  • Bot defense

    Route suspected bots to verification. Real visitors see nothing different. Bots hit a wall.

  • AI-crawler optimization

    Detect which of 38 named AI agents is visiting — so you can serve structured, machine-readable content alongside your human experience.

Why ClickStream

Everything you need. One install. No tradeoffs.

Most teams stitch together four tools to get a fraction of this. ClickStream does it in one — built for the web as it actually works in 2026.

Feature comparison: ClickStream versus Google Analytics, Hotjar, bot detectors, and 6sense
Feature Google Analytics Hotjar Bot detectors 6sense ClickStream
Identity resolution No No No Company only Person-level
Bot classification Partial No Block only No 11 categories + AI
Behavioral scoring No No No Limited 26 models, <3ms benchmarked
Developer response API No No No No @clickstreamhq/signals
First-party by design No No No No Under your domain
Free tier Yes No No No 50K pageviews/mo

One platform replaces four — at a fraction of the combined cost.

Real outcomes

Measurable results for every kind of business.

Illustration: a winged shopping cart taking off, surrounded by stars and checkmarks

E-commerce & retail

  • Inventory protected from scalper bots at launch
  • Real customers can actually buy limited products
  • Wasted ad spend recovered with documentation
  • Your true conversion rate — not inflated bot visits

"What percentage of your Black Friday traffic was actually human?"

Illustration: a laptop reading 'Free trial' and two phones served on a platter

SaaS & founders

  • High-intent trial users identified and contacted early
  • Frustrated users helped before they churn
  • Trial-to-paid conversion improves measurably
  • First-60-day churn drops on real behavioral signals

"Which trial users are 3 days from converting — right now?"

Illustration: a drive-in billboard showing a crossed-out bot beside a human, with cars watching

Performance marketing

  • True human conversion rate revealed and documented
  • Ad budget redirected away from bot-heavy sources
  • Board presentations built on verified, clean data
  • Budget approved — because the numbers are real

"How much of your ad spend went to traffic that can’t buy?"

Pricing

Start free. Upgrade when you see the value.

Every plan includes the dashboard, human/bot classification, and basic signals. Paid tiers add identity resolution, the full scoring suite, and realtime.

Knowledge hub

Everything you need to convert more visitors.

Eliminate ad fraud, understand your visitors, and maximize the ROI of every marketing dollar.

Whitepapers

All →

Featured Whitepaper

First-Party Cookies: The Gold Standard

How server-set first-party cookies recognize returning visitors for up to ~400 days — the browser maximum — maximizing retargeting and repeat conversions.

Read →

Blog

All →

Latest Post

The Cookieless Fallback is a compromise

Why chasing a cookieless future quietly costs you visitor recognition — and revenue. First-party cookies still work in every browser today.

Read →

Behavioral models

All →

Start Here

Series Introduction & Architecture

How 26 edge-computed models turn raw behavior into revenue signals — scored in real time on every event.

Read →

Go deeper

Built different. Here's the proof.

For the technical buyer who wants to see exactly how it works under the hood.

The identity graph isn't a database — it's a resolution layer. Raw events reference cookies; the graph resolves cookies to people; analytics operate on people. No single signal provides complete coverage, which is precisely why stacking layers matters. The _cs_vid cookie is set server-side on your own subdomain for full first-party status and a ~400-day lifespan — the browser maximum, versus the 7-day cap Safari ITP puts on JS-set cookies. When a visitor submits a form or logs in, their email is converted to a SHA-256 hash immediately — a one-way fingerprint that matches identities across sessions and devices while keeping analytics storage free of plaintext addresses. Ad-click IDs (gclid, fbclid, ttclid, msclkid) are captured on landing so attribution survives the next click.

Last-click attribution hands 100% of the credit to whatever a customer clicked right before buying — making brand campaigns, nurture emails, and retargeting look invisible. ClickStream resolves touchpoints across sessions and devices and captures 13 ad-platform click-ID types, so you can see which channels actually move revenue and reallocate with confidence.

Your data stays yours. ClickStream is first-party by design — data flows through your own domain, not a third-party network, with AES-256-GCM per-tenant encryption and GDPR/CCPA controls including gated PII reveal. Analytics storage holds hashed identifiers only; raw contact fields are AES-256-GCM encrypted with audited, password-gated access. You own your data — CSV exports on Growth+, raw-event Parquet exports on request. We don't sell your data, and we don't share it across customers unless you explicitly opt into network features.

You don't need a data team. If you run an online store, a WordPress site, or anything with a checkout, ClickStream tells you in plain language how many of your visitors are real people, which marketing actually brought them, and which ones are about to buy or about to leave — so you can spend your time and budget on the customers who can actually say yes. Start on the free plan, add one line of code, and watch your human-vs-bot split appear within minutes.

Ready to see who's really on your site?

Stop losing conversions to anonymous traffic and wasted ad spend. Get the platform that identifies visitors, detects fraud, and lets your site act in real time.

Start free