TestFreaks

What TestFreaks is and how the review widget works

TestFreaks is a Swedish reviews aggregation and display platform that crawls product reviews from publishers, retailers and editorial sources, normalises them, scores them, and exposes the result on merchant product pages through an embedded widget. The platform also offers post-purchase review collection workflows and a moderation interface for the merchant catalogue. The goal is to provide rich, fraud-resistant social proof that complements the merchant own reviews.

From a technical standpoint, TestFreaks is integrated by adding a JavaScript snippet that loads the widget on product pages, optionally combined with server-side calls for SEO-friendly content. The widget queries the TestFreaks back end for aggregated reviews, displays them inline, and emits behavioural events for visibility, expansion and click-through. TestFreaks infrastructure runs in the European Union (Sweden), which significantly simplifies the data transfer story compared with non-EU vendors.

Data and cookies set by the widget

The widget collects the product identifier on the page, the page URL, the timestamp, interaction events (impression, expansion, sort, click on a star or on an external source link), the IP address (typically truncated for analytics), the user agent and a widget-scoped identifier stored in cookies. Combined, these signals allow TestFreaks to measure widget performance, detect crawler abuse and improve merchandising recommendations.

Two cookie scopes are involved. First-party analytics cookies set on the merchant domain memorise an analytics identifier so that repeated views by the same visitor are not counted as new sessions. Third-party cookies on the testfreaks.com domain support widget telemetry and cross-merchant abuse detection. Both scopes carry personal data under GDPR even when the identifier is hashed, because reidentification of the same visitor across sessions is technically possible.

GDPR and ePrivacy implications

Under Article 5(3) ePrivacy, the analytics cookies set by the TestFreaks widget are not strictly necessary to display the reviews; they support measurement, not delivery. Prior, freely given, specific, informed and unambiguous consent is therefore required on EU-facing pages. The display of the aggregated reviews content itself, without behavioural cookies, can run on legitimate interest because it brings clear value to the consumer and does not significantly affect their privacy.

In GDPR terms, TestFreaks is a processor for the merchant on the moderated reviews of the merchant own customers and an independent or joint controller for the aggregation, scoring and anti-abuse models that operate on its broader dataset. A signed data processing agreement is mandatory, and the privacy notice must describe the categories of data collected by the widget, the purpose of each cookie and the retention periods applied by TestFreaks.

Data transfers and EU hosting

TestFreaks is headquartered and hosted in Sweden, within the European Union, so the standard widget deployment does not trigger an Article 46 transfer assessment. Data stays under EU jurisdiction and benefits from the protections of national supervisory authorities. The merchant should still confirm with TestFreaks that subprocessors (CDN, observability, customer support) remain within the EEA or covered by adequacy decisions, and document this in the records of processing activities.

If the merchant subscribes to specific TestFreaks add-ons that route data through non-EU partners (for example, a sentiment analysis model hosted in the United States), that secondary flow has to be assessed on its own. In a default deployment, however, EU hosting is one of the main compliance advantages of TestFreaks compared with non-European review aggregators.

Consent banner and lightweight DPIA

Because the data is moderate in volume and stays in the EU, a full DPIA is not always mandatory; a documented lightweight assessment is usually sufficient. The consent banner should expose an Analytics category that controls the TestFreaks widget cookies and any other measurement scripts, with a clear description and a reject button as prominent as accept. Reviews content can remain visible to non-consenting visitors, with measurement disabled.

Practical implementation and alternatives

Concretely: block the analytics cookies of the TestFreaks widget until consent is granted, configure the snippet so that aggregated review content is still rendered without measurement, sign the data processing agreement, list TestFreaks in the cookie table and the privacy notice, and reference the EU hosting in your transfers section. If your stack requires alternatives, Trustpilot, Bazaarvoice (with EU residency), Yotpo (with EU options), Reviews.io, eKomi and Avis Verifies are reasonable comparable services to consider.