FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Marketing

Loox

PreferencesOfficial website

Loox is a product reviews and user generated content app for online stores, widely used on Shopify. It collects photo and text reviews from customers and displays review widgets on product pages, and it sends automated emails to request reviews after purchase. The storefront widget can set cookies and process the visitor IP and device information, while the review collection handles customer personal data, so consent and clear information are needed on European stores.

Block Loox until consentScan my site
Overview

What does Loox do?

What Loox is

Loox is a reviews and user generated content app for online stores, most commonly installed on Shopify. It gathers photo and video reviews from customers, displays them in widgets on product pages, and automates the request for reviews by email after a purchase, helping merchants build social proof.

What data and cookies it collects

On the storefront, the Loox widget can set cookies and process the visitor IP and device information to display and measure reviews. On the collection side, Loox processes customer personal data, including names, email addresses, order details, and the photos and text customers submit, which is more sensitive than the storefront widget alone.

GDPR and ePrivacy implications

The widget cookies fall under the ePrivacy Directive, and the customer data and review photos are personal data under the GDPR. Sending review request emails is a processing activity that needs a lawful basis, and photos can reveal more than expected, so transparency and a clear basis are important.

Consent requirements

Non essential widget cookies should wait for consent. Review request emails to existing customers can sometimes rely on legitimate interest or the soft opt in, but you must offer an easy way to object, and reviewers should understand that their name and photo may be published. Configure the widget so tracking cookies are not set before consent.

Data transfers outside the EU

Loox is based in Israel, which has an EU adequacy decision, and uses cloud infrastructure that can include the United States. United States processing relies on the EU US Data Privacy Framework or on Standard Contractual Clauses. Confirm where review data and photos are stored.

Practical compliance steps

Gate non essential widget cookies behind consent, set a lawful basis for review request emails with an opt out, and sign a data processing agreement with Loox. Tell reviewers how their content will be used, set retention for review data, and describe Loox in your cookie policy and privacy notice.

Compliance

Loox and the GDPR

Loox is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR)
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive

Impact assessment (DPIA)

Loox processes customer names, emails, photos, and review content, and its widget can track storefront visitors. Assess the lawful basis for review request emails, the handling of photos, the widget cookies, and the transfers outside the EEA.

Sample text for your banner

We use Loox to show customer reviews and photos. The Loox widget may set cookies to display and measure reviews. Non essential cookies run only after you accept them.
Cookies and trackers

What Loox sets and contacts

Tracking method
JavaScript widget, cookies, review collection emails
Server location
Israel and United States
Data transferred outside the EU
Loox is based in Israel, which benefits from an EU adequacy decision, and uses cloud infrastructure that can include the United States. United States processing relies on the EU US Data Privacy Framework or Standard Contractual Clauses.

Cookies set (3)

NameTypeDurationPurpose
__looxAnalytics1 yearIdentifies a visitor so that review widgets can be displayed and their interaction measured.
loox_sessionFunctionalSessionMaintains the review widget state during the visit.
loox_uidAnalytics1 yearStores an identifier used to attribute review interactions and referrals.

Third-party domains contacted (3)

  • loox.io
  • loox.app
  • cdn.loox.io
Questions

Frequently asked questions about Loox

Can't find your question? Write to us, we answer fast.

What cookies does Loox set?

The Loox storefront widget can set a visitor identifier and analytics cookies to display review widgets and measure interaction, plus a session value. The analytics cookies are not strictly necessary, so they belong in the analytics category of your banner.

Do I need consent for Loox?

You need consent for the non essential widget cookies. The review collection itself, including emails and photos, is processed under a separate lawful basis, but tracking cookies on the storefront require prior consent under the ePrivacy Directive.

What is the legal basis for Loox?

Consent under Article 6(1)(a) of the GDPR covers the tracking cookies. Review request emails to existing customers may rely on legitimate interest or the soft opt in, and publishing a review relies on the basis you set out to the reviewer.

Does Loox transfer data outside the EU?

Loox is based in Israel, which has an EU adequacy decision, and may use cloud infrastructure in the United States. United States processing relies on the EU US Data Privacy Framework or Standard Contractual Clauses.

Is a DPIA needed for Loox?

A targeted assessment is useful because Loox handles customer photos and contact details. Document the review data collected, how photos are used and stored, the retention, and the transfers.

How do I run Loox compliantly?

Gate the widget tracking cookies behind consent, set a lawful basis and opt out for review request emails, sign a data processing agreement, and tell reviewers how their content will appear. Disclose Loox in your privacy notice and cookie policy.

Are there alternatives to Loox?

Alternatives include Judge.me, Okendo, Yotpo, and Stamped. Some offer EU hosting or lighter tracking, so compare their data handling and transfer arrangements.

How do I update my cookie policy for Loox?

List the Loox cookies with their purpose and duration, label the analytics ones accordingly, name Loox as the recipient, and describe where review data is stored and any transfers. Update it when you change the widget settings.

Same category

More services: Marketing

See the whole category

HeyPongo

HeyPongo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. HeyPongo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, HeyPongo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Basin

Basin is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Basin integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Basin helps organizations maintain robust websites that meet user expectations and technical requirements.

Marketing

Rock Content

Rock Content is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Rock Content enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Rock Content empowers marketing teams to achieve measurable growth.

Marketing

FormBold

FormBold is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. FormBold supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, FormBold ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

Pardot

Pardot is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Pardot enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Pardot empowers marketing teams to achieve measurable growth.

Marketing

Listrak

Listrak is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Listrak provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Listrak helps deliver the right message to the right audience at the right time.

Marketing

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site