Website Visitor Tracking: The Three Layers and Which Tools Handle Each

Website visitor tracking is the practice of collecting data about who visits your site, where they came from, what they do while they’re there, and — in the case of lead-generating sites — who they are when they submit a form or make a purchase. Different tools solve different parts of this problem, and most sites need more than one.

The Three Layers of Website Visitor Tracking

Most website tracking discussions conflate three distinct problems:

  1. Behavioral tracking: what are visitors doing on your site? Which pages do they visit, how far do they scroll, where do they click, where do they drop off?
  2. Traffic source tracking: where did visitors come from? Which marketing channel, campaign, or referral source sent them to your site?
  3. Identity and lead tracking: for sites that generate leads — who is the specific person who submitted a form, where did they come from, and what happened after they became a lead?

These are related but separate. Google Analytics handles the first two (with limitations). Session replay tools handle the first in more depth. Lead attribution tools handle the third. Choosing the right tracking setup depends on which questions you’re actually trying to answer.

Behavioral Tracking Tools

Google Analytics 4

GA4 is the baseline for behavioral tracking on most websites. It tracks pageviews, sessions, scroll depth (built-in scroll tracking fires at 90% scroll), outbound link clicks, video engagement, and custom events you define. The reporting interface shows which pages drive the most traffic, which pages have the highest engagement rate, and where in your site’s funnel visitors are dropping off.

GA4 stores data as individual events (each page view, each scroll, each click is a row in GA4’s data model) and aggregates them into reports. The aggregation is where its limitations appear — you see patterns across sessions, not behavior at the individual visitor level. “Page X has a 45% bounce rate” is an aggregate; you can’t see that a specific visitor from your Google Ads campaign viewed pages X, Y, and Z before leaving without converting.

Microsoft Clarity

Microsoft Clarity is a free session replay and heatmap tool that records actual visitor sessions and shows where they click, how they scroll, and where they seem confused or frustrated (rage clicks, dead clicks, quick backs). This is behavioral tracking at the individual session level — you can watch a replay of how a real visitor navigated your site and see exactly where they dropped off.

Clarity is worth installing on any site that’s actively trying to optimize conversion — it surfaces UX problems that aggregate analytics can’t reveal. “Our contact form page has a 20% conversion rate” is GA4 data; “this specific form has a confusing label and 40% of visitors stop at that field” is Clarity data. Both are useful, they answer different questions.

Hotjar

Hotjar covers similar territory to Clarity — session recordings, heatmaps, scroll maps — with additional features for surveys, feedback polls, and user interviews. Clarity is free with no volume limits; Hotjar’s paid plans start around $32/month and add more sophisticated segmentation and funnel analysis. For most small to mid-size sites, Clarity covers the behavioral tracking use case for free.

Traffic Source Tracking

GA4 handles traffic source tracking for session-level data — where did visitors come from (search engine, specific referrer, UTM-tagged campaign, direct)? This is powerful for understanding which channels drive traffic volume.

The limitation: GA4 tracks the session’s source, not the visitor’s original source. A visitor who first arrived from a Google Ad three weeks ago and comes back today through a direct visit is attributed to “direct” in today’s session. The ad that originally brought them gets no credit for today’s conversion. This is the cross-session attribution problem, and it affects how you measure the true impact of acquisition channels.

UTM Parameters

UTM parameters (source, medium, campaign, term, content) added to your marketing links are the mechanism GA4 uses to identify campaign traffic. A Google Ad with a properly tagged destination URL passes those parameters to GA4, which records that the session originated from that campaign. The UTM discipline — consistently tagging every marketing link — is what makes GA4’s Traffic Acquisition reports actionable.

Without consistent UTM tagging, traffic from your email campaigns, social posts, and paid ads blends into “direct” or “referral” in GA4, making it impossible to compare channel performance. With consistent tagging, you can see that your spring email campaign drove 400 sessions last month versus your paid social’s 150 — meaningful data for marketing decisions.

Identity and Lead Tracking

For businesses where the website’s job is to generate leads — service businesses, SaaS, B2B, professional services — the tracking questions change from “how do visitors behave in aggregate?” to “who submitted that form, where did they come from, and what happened after?”

GA4 tracks form submission events (when configured). But the GA4 event that says “form_submit happened on /contact” carries no information about who the person is, what they put in the form, or what’s happening in your CRM pipeline. For that, you need a different layer of tracking.

CRM with Lead Source Field

Most CRMs (HubSpot, Salesforce, Pipedrive, ActiveCampaign) have a lead source field on contact records. The problem is that CRMs don’t automatically populate this field — they create the contact from your form submission (name, email, phone, message), but they don’t know which campaign brought that person to your site. That data has to be captured at form submission and sent with the submission.

First-Party Lead Attribution

First-party attribution tools bridge this gap. They work in three steps:

  1. When a visitor arrives with UTM parameters in the URL, the tool stores them in a first-party cookie in the visitor’s browser. If the visitor arrived without UTMs (direct or organic), it notes that instead.
  2. The tool populates hidden fields in your web forms with the stored UTM values — automatically, without any configuration per form after the initial setup.
  3. When the visitor submits the form, those UTM values travel with the submission to your CRM or email platform, populating the lead source field on the contact record.

The result: every lead in your CRM has an attribution tag — “google / cpc / spring-promo / kitchen-remodel-keyword” or “organic / none” or “email / newsletter / june-campaign” — that tells you exactly where they came from. Now you can filter your lead pipeline by source and compare close rates, deal sizes, and revenue by acquisition channel.

Company-Level Visitor Identification (B2B)

For B2B sites where the visitors you most want to reach are companies (not anonymous individuals), a different category of tool exists: company-level visitor identification. Tools like Clearbit Reveal, Albacross, and Leadfeeder use the visitor’s IP address to identify the company associated with that IP — so instead of “anonymous visitor, 3 page views,” you see “Acme Corp, Chicago, 3 page views on your pricing page.”

This doesn’t identify the individual person (IP-to-company matching doesn’t yield a name or email), but it tells your sales team that a target account is researching your solution. Combined with your CRM’s account data, it creates account-based intent signals that sales can act on. Accuracy varies — residential ISPs, VPNs, and shared office IP addresses all reduce the match rate — but for companies with clearly defined target account lists, company-level identification can be a meaningful signal layer.

Choosing Your Tracking Stack

The right tracking combination depends on what you’re optimizing:

  • Content or media site: GA4 for traffic and content performance analytics is usually sufficient. Add Clarity if you’re actively optimizing UX.
  • Lead generation site (service business, SaaS, B2B): GA4 for aggregate traffic and channel reporting, plus a first-party attribution tool to capture lead-level source data. Without the attribution layer, you know traffic by channel but not leads-to-revenue by channel.
  • E-commerce: GA4 with enhanced e-commerce tracking for aggregate purchase attribution, plus dedicated e-commerce attribution tools (Triple Whale, Northbeam, Rockerbox) if you’re spending significantly across multiple paid channels and need more sophisticated multi-touch modeling.
  • B2B with target accounts: GA4 plus company-level identification (Clearbit, Albacross) plus first-party lead attribution for the contacts who actually convert.

Start with GA4 (free) and install Microsoft Clarity (free). If you’re running paid campaigns to a lead-generation site and want to know which campaigns produce leads that close, add a first-party attribution layer. Add company-level identification when you have a defined target account strategy and a sales team that can act on account intent signals.