Kudobuzz Product Reviews & UGC

This app exposes customer email addresses in your website's page source code in a manner easily accessible to automated scrapers. If you are subject to GDPR or any other data protection legislation, do not install this app.

I had to spend several hours informing affected customers and consulting with the ICO to ensure I was meeting my legal obligations as a data handler, which was incredibly embarrassing and upsetting. Fortunately no further action was required, but the situation should never have arisen in the first place.

The issue is a fundamental flaw in how the app handles customer data, not an isolated incident, as I have identified the same problem across multiple stores using Kudobuzz. It should be a straightforward fix for any competent developer, but having raised this directly with Kudobuzz I received no response whatsoever. Kudobuzz's handling of this, both the original data flaw and their complete silence when contacted, has resulted in this review. Totally unacceptable breach of merchant trust.