No, you’re not being paranoid. Sites really are watching your every move | Ars Technica

Sites log your keystrokes and mouse movements in real time, before you click submit.....
https://arstechnica.com/tech-policy/2017/11/an-alarming-number-of-sites-employ-privacy-invading-session-replay-scripts/