Judge.me Product Reviews App

CRITICAL SECURITY WARNING: 27th September 2026

THEY DO NOT DELETE YOUR DATA UPON UNINSTALLATION. I have just confirmed this in writing with their support team (Agent "Daniel"). If you uninstall the app, Judge.me retains 100% of your data and your customers' data indefinitely unless you send a separate, specific email demand to force deletion.

The Shopify uninstall screen states: "A request will be sent to the app developer within 48 hours to delete all personal customer information."

Judge.me explicitly admitted they do not delete data automatically on deletion. They rely on merchants uninstalling and forgetting, leaving your data hoarded on their servers forever.

If you leave, you MUST email support@judge.me formally demanding Article 17 Erasure. Do not trust the uninstall button.

Original Review Follows:

Serious Unanswered GDPR Questions: Forced "Always On" Tracking & Opaque Data Sharing that remain completely unanswered by the developer.

1. Forced "Always On" Tracking with No Opt-Out The app forces its Shopify Web Pixel into "Always On" mode, granting it unlimited access to customer and business data. Crucially, the native option to switch to the privacy-preserving "Optimised" mode is greyed out and disabled. When I contacted support, I was explicitly told: "Unfortunately, the app pixels cannot be disabled unless [the app] is uninstalled." This directly prevents merchants from complying with GDPR Data Minimisation principles (Article 5) by holding core app functionality hostage and forcing unlimited data access.

2. Contradictory Documentation on Data Collection When questioned about accessing storefront browsing data, their support AI stated: "We collect usage and technical data (like clicks, scrolls, mouse movements, session recordings, page views...) ... Sub-processors include Microsoft Clarity (behaviour analytics), Hotjar (behaviour analytics)..."

A human support agent later claimed these tools are only used on the merchant admin panel.
Update: I have scanned my storefront and cannot currently detect Clarity scripts running on the public site. Therefore it is likely that this only runs in the admin panel

3. Lack of DPO Response I escalated these specific GDPR concerns (including the forced data state and contradictory tracker disclosures) directly to their Data Protection Officer (DPO).
Update: response now received, but core technical questions remain unanswered.

4. Google Shopping API Data Retention Concerns Be aware that their Google Shopping integration does not send reviews directly to your own Merchant Centre. Instead, data is routed to a centralised, pooled resource managed by Judge.me. If your store sells custom products without unique GTINs or global SKUs, matching errors can occur. Crucially, disconnecting this API does not automatically delete your catalogue data from their pool; you must manually submit a formal request for erasure under GDPR Article 17.

Summary Until the developer unlocks the "Optimised" privacy setting, I cannot recommend this app for merchants who value GDPR principles of data minimisation.

Updated: 2026-07-08

25th August 2026 - Pixel remains forced to always on despite objection

Updated: 2026-09-12
Latest response from the new DPO raises more questions, and answers none. The Pixel remains always on, why does a review app need an analytics pixel? An always on pixel is not consistent with GDPR law.