E-commerce

Judge.me

Judge.me is a popular Shopify product reviews app. It loads review widgets on storefront pages, can set cookies and read identifiers, and collects reviewer data such as names, emails and review content while sending review request emails. As a provider operating from outside the EEA, it raises GDPR, ePrivacy and data transfer obligations.

Block Judge.me until consent Scan my site

Overview

What does Judge.me do?

What Judge.me is

Judge.me is a widely used product reviews application for Shopify and other e-commerce platforms. It displays star ratings, review widgets and photo reviews on storefront pages, invites customers to leave reviews by email, and stores the collected reviews. The widgets run third party JavaScript and communicate with Judge.me cloud services.

What data and cookies it collects

Judge.me processes reviewer names, email addresses, order references, review text, ratings and uploaded media, and it sends review request emails after purchase. The widgets may set first party or third party cookies for session handling and measurement and can read device or browser identifiers. The exact cookies depend on the widget settings you enable.

GDPR and ePrivacy implications

Reviewer details and review content are personal data under the GDPR, and Judge.me typically acts as your processor under a data processing agreement. Under ePrivacy, any non essential cookie or identifier the widget sets requires prior consent, and review invitation emails must rest on a valid basis. Only strictly necessary display functions are exempt from consent.

Consent requirements

Non essential cookies and any tracking need freely given, specific and informed opt in consent before they load. Review invitation emails generally require consent or a carefully assessed legitimate interest, and you must inform reviewers and give a basis for publishing their name and content. Showing existing aggregated ratings can often run as strictly necessary.

Data transfers to the United States

Judge.me operates from outside the EEA and uses US and global cloud infrastructure, so personal data of EU shoppers and reviewers is transferred to a third country. This transfer must be covered by Standard Contractual Clauses, by the EU US Data Privacy Framework where the provider is certified, and by a transfer impact assessment with any supplementary measures that are needed.

Practical compliance steps

Sign a data processing agreement, confirm the transfer mechanism, gate non essential cookies behind your consent platform, set a lawful basis and clear notice for review emails, define retention for reviews and personal data, and list Judge.me and its US transfers in your privacy and cookie notices. Re test after any settings change.

Compliance

Judge.me and the GDPR

Judge.me is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis: Consent under ePrivacy for non essential cookies and tracking, and for sending review invitation emails, with legitimate interest available only for the strictly necessary display of reviews
Risk level: medium
Applicable regulations: GDPR, ePrivacy Directive (Cookie Law), EU US Data Privacy Framework, Standard Contractual Clauses

Impact assessment (DPIA)

Judge.me collects reviewer identity, emails and order linkage and transfers data outside the EEA, which raises the risk profile. Assess transfer safeguards, review invitation emailing, retention of reviews and any tracking, and screen for a DPIA where processing is large scale or combined with profiling.

Sample text for your banner

We use the Judge.me reviews app, which may set cookies, read identifiers and process your details to show reviews and send review requests. Non essential cookies load only after you accept, and data may be processed outside the EEA under appropriate safeguards.

Cookies and trackers

What Judge.me sets and contacts

Tracking method: Shopify product reviews app that loads third party JavaScript widgets on storefront pages, may set cookies and read identifiers, collects reviewer submissions including names, emails and review content, and sends review invitation emails
Server location: United States / global cloud infrastructure
Data transferred outside the EU: Judge.me operates from outside the EEA and uses US and global cloud infrastructure, so personal data of EU shoppers and reviewers is transferred to a third country. Rely on Standard Contractual Clauses and the EU US Data Privacy Framework where applicable, plus a transfer impact assessment.

Cookies set (4)

Name	Type	Duration	Purpose
judgeme_session	Strictly necessary	Session	Maintains the widget session so reviews and the submission form work during a visit
judgeme_widget	Functional	12 months	Remembers widget display state and reviewer interaction across storefront pages
_jm_token	Functional	6 months	Links a review submission to the correct verified buyer and prevents duplicates
_jm_analytics	Analytics	Up to 13 months	Measures widget impressions and engagement, loaded only after consent

Third-party domains contacted (3)

judge.me
cdn.judge.me
cache.judge.me

Questions

Frequently asked questions about Judge.me

Can't find your question? Write to us, we answer fast.

Write to us

What cookies does Judge.me set?

Judge.me widgets can set first party or third party cookies for session handling and measurement and may read device or browser identifiers. The exact set depends on the widget settings you enable, so audit your live storefront and classify each cookie as strictly necessary or non essential.

Do I need consent to use Judge.me?

Yes for non essential cookies and tracking, which need prior opt in consent under ePrivacy. Review invitation emails need consent or a carefully assessed legitimate interest, and publishing reviewer names needs a valid basis. Showing aggregated ratings can often run as strictly necessary.

What is the legal basis for processing?

Displaying reviews can rely on legitimate interest, while non essential cookies and the review request emails typically rely on consent. Publishing reviewer identity needs a clear basis and notice. Record the basis for each purpose in your records of processing.

Does Judge.me transfer data to the US?

Yes. Judge.me operates from outside the EEA on US and global cloud infrastructure, so EU personal data is transferred to a third country. Cover the transfer with Standard Contractual Clauses, the EU US Data Privacy Framework where the provider is certified, and a transfer impact assessment.

Do I need a DPIA for Judge.me?

Because it transfers data outside the EEA and processes reviewer identity and emails, a screening assessment is advisable. A full DPIA is more likely if you process at large scale, combine it with profiling, or handle sensitive review content. Document your decision.

How do I implement Judge.me compliantly?

Sign a data processing agreement, confirm the transfer mechanism, gate non essential cookies behind your consent platform, set a lawful basis and clear notice for review emails, define retention, and disclose Judge.me and its US transfers in your notices.

Are there alternatives to Judge.me?

Alternatives include EEA based review providers, a self hosted review system that keeps data in your own database, or other Shopify review apps. EEA based or self hosted options reduce third country transfer obligations, but each changes the cookie and consent profile.

How do I update my cookie policy for Judge.me?

List the Judge.me cookies with names, purposes, durations and first or third party status, name Judge.me as a processor, disclose the US transfer and its safeguards, state the legal basis, and explain how users exercise rights and withdraw consent.

CommerceHQ

CommerceHQ is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. CommerceHQ integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, CommerceHQ helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Payoneer

Payoneer is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Payoneer supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Payoneer ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Checkin

Checkin is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Checkin integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Checkin helps organizations maintain robust websites that meet user expectations and technical requirements.

E-commerce

Oxatis

Oxatis is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Oxatis supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Oxatis ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Nacelle

Nacelle is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Nacelle supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Nacelle ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

makeshop

MakeShop is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. MakeShop integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, MakeShop helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my banner Scan my site

Judge.me

What does Judge.me do?

What Judge.me is

What data and cookies it collects

GDPR and ePrivacy implications

Consent requirements

Data transfers to the United States

Practical compliance steps

Judge.me and the GDPR

Impact assessment (DPIA)

Sample text for your banner

What Judge.me sets and contacts

Cookies set (4)

Third-party domains contacted (3)

Frequently asked questions about Judge.me

What cookies does Judge.me set?

Do I need consent to use Judge.me?

What is the legal basis for processing?

Does Judge.me transfer data to the US?

Do I need a DPIA for Judge.me?

How do I implement Judge.me compliantly?

Are there alternatives to Judge.me?

How do I update my cookie policy for Judge.me?

More services: E-commerce

CommerceHQ

Payoneer

Checkin

Oxatis

Nacelle

makeshop

Make your site compliant today.