Feedback Fish
Feedback Fish is a lightweight in product feedback widget by Feedback Fish GmbH (Germany) that lets users send written feedback, ratings and screenshots directly from a website or web application.
What does Feedback Fish do?
What Feedback Fish is
Feedback Fish is a lightweight feedback widget developed by Feedback Fish GmbH, a German startup. It is embedded with a single script tag and adds a small floating button that opens a modal where users can submit feedback, choose an emotion rating and optionally attach screenshots. Feedback Fish is popular with SaaS startups that need to collect user input without the heavy footprint of enterprise customer feedback platforms.
Cookies and data collected
By default Feedback Fish operates with minimal storage, using localStorage to remember whether a user has already submitted feedback and limited request logs server side. The service receives the free text feedback, optional email address, page URL, browser user agent and IP address. Screenshots, when enabled, may contain personal data depending on what the user captures.
Legal basis under GDPR and ePrivacy
The submission of feedback by a user is typically treated as an implicit consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR) for processing free text feedback. If the widget stores non strictly necessary data on the device, Art. 5(3) ePrivacy and section 25 TTDSG require prior consent. When only strictly necessary technical storage is used, consent for storage itself can be avoided.
Data transfers
Feedback Fish hosts customer data in the European Union. Some sub processors (such as Vercel for the frontend or email delivery providers) may be US based and rely on SCCs and the EU US Data Privacy Framework. The exposure remains far smaller than with US first vendors and the operator should verify the current sub processor list.
DPIA and risk level
The risk level is generally low. A formal DPIA is not required for standard product feedback scenarios. Operators should still assess risks when screenshots are enabled, when the widget is used by employees or by minors, or in regulated industries.
Implementing compliance correctly
Sign a Data Processing Agreement with Feedback Fish GmbH, list the service in your privacy notice and sub processor register, configure the widget to avoid unnecessary fields, disable screenshots if they may capture personal data, set short retention periods and make sure user submitted email addresses are handled as personal data.
Feedback Fish and the GDPR
- Legal basis
- Art. 6(1)(a) GDPR consent when the widget is used in a way that processes personal data such as email addresses, Art. 6(1)(f) GDPR legitimate interest for collecting anonymous product feedback used to improve services. Art. 5(3) ePrivacy Directive may not apply if the widget operates without storing any non strictly necessary information on the device.
- Risk level
- low
- Applicable regulations
- GDPR, ePrivacy Directive, TTDSG (Germany), LOPDGDD (Spain), Loi Informatique et Libertes (France), Standard Contractual Clauses (for sub processors), EU US Data Privacy Framework (for US sub processors)
Impact assessment (DPIA)
A full DPIA under Art. 35 GDPR is not normally required because Feedback Fish processes a limited amount of low risk data (free text feedback, optional email, screenshots if enabled). A simplified risk assessment is still recommended when feedback is collected from authenticated areas, when screenshots may contain personal data, or when widgets are used in sensitive contexts (healthcare, employees, minors).
Sample text for your banner
We use Feedback Fish (Feedback Fish GmbH, Germany) to collect your feedback. Your feedback, optional email address and any attached screenshot are sent to Feedback Fish servers in the European Union. By submitting the form, you consent to this processing.
What Feedback Fish sets and contacts
- Tracking method
- Lightweight JavaScript widget loaded from feedback.fish that opens a small modal for collecting written feedback, screenshots and email addresses. The widget sends payloads over HTTPS to the Feedback Fish API and stores minimal data in localStorage or sessionStorage.
- Server location
- European Union (Germany), with Vercel and AWS infrastructure primarily hosted in Frankfurt (eu central 1). Feedback Fish GmbH is established in Germany.
- Cookieless mode available
- Yes
Cookies set (4)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| feedbackfish_last_submit | local_storage | persistent | LocalStorage flag indicating that the user has recently submitted feedback, used to throttle the widget UI. |
| feedbackfish_session | session | session | Optional session identifier used while the modal is open to correlate a feedback submission with the originating page view. |
| feedbackfish_user | local_storage | 6 months | LocalStorage value linking returning anonymous users to their previous feedback (only when a user identifier is passed by the host application). |
| feedbackfish_widget_open | session | session | Session flag indicating whether the feedback modal has been opened during the current page view. |
Third-party domains contacted (4)
feedback.fishapi.feedback.fishcdn.feedback.fishapp.feedback.fish
Frequently asked questions about Feedback Fish
Can't find your question? Write to us, we answer fast.
What cookies or storage does Feedback Fish use?
Feedback Fish has a minimal footprint. It typically uses localStorage to remember submissions and limited server side logs. It does not set advertising or cross site tracking cookies.
Is consent required to load Feedback Fish?
When the widget operates with strictly necessary storage only, prior consent is generally not required under Art. 5(3) ePrivacy. Once email addresses or screenshots are processed, the submission step itself should be treated as an explicit user action and informed.
What legal basis applies to feedback submissions?
Article 6(1)(a) GDPR (consent through active submission) or Art. 6(1)(f) GDPR (legitimate interest in improving the product). The legal basis must be clearly explained in the privacy notice.
Are there transfers to the United States?
Feedback Fish stores data in the European Union. Some sub processors may be located in the US under SCCs and the EU US Data Privacy Framework. The exposure is significantly lower than with US headquartered competitors.
Do I need a DPIA for Feedback Fish?
A formal DPIA is normally not required because the processing is low risk and limited in scope. A simplified review is recommended when screenshots are enabled, in employee contexts or with minors.
How do I implement Feedback Fish compliantly?
Sign the DPA, list Feedback Fish in your privacy notice and sub processor register, limit collected fields, set short retention, disable screenshots when sensitive data may be captured and inform users of the optional email field.
What are the alternatives to Feedback Fish?
Alternatives include self hosted feedback forms, Sleekplan, Canny (US), Productboard (US) and Userback. EU based alternatives tend to provide the strongest GDPR posture.
How do I update my cookie policy for Feedback Fish?
Mention the service, the controller (Feedback Fish GmbH, Germany), the purposes (collecting product feedback), the legal basis, the retention period and the EU US transfers for sub processors if any. Update at least annually.
8x8
8x8 is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. 8x8 supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, 8x8 ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Facebook Chat Plugin
Facebook Chat Plugin is a live chat and customer messaging platform that enables businesses to engage with website visitors in real time. It provides instant messaging, chatbot automation, and team collaboration tools to deliver fast, personalized customer support. Facebook Chat Plugin supports multi-channel communication, conversation routing, and canned responses to improve response times. With built-in analytics and CRM integration, Facebook Chat Plugin helps convert visitors into customers.
Aidbase
Aidbase is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Aidbase integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Aidbase makes advanced AI accessible to all teams.
Liscio
Liscio is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Liscio supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Liscio ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Droz Bot
Droz Bot is an AI-powered chatbot platform that enables businesses to automate customer conversations across websites, messaging apps, and social channels. It provides natural language processing, conversation flow builders, and backend integration to handle inquiries, qualify leads, and provide support. Droz Bot reduces response times and costs while maintaining high-quality conversational experiences that scale with your business needs.
Sonetel Chat
Sonetel Chat is a live chat and customer messaging platform that enables businesses to engage with website visitors in real time. It provides instant messaging, chatbot automation, and team collaboration tools to deliver fast, personalized customer support. Sonetel Chat supports multi-channel communication, conversation routing, and canned responses to improve response times. With built-in analytics and CRM integration, Sonetel Chat helps convert visitors into customers.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.