GDPR & your visitors’ privacy

The short version

• No cookies. The widget sets no cookies and uses no local storage on your visitors’ browsers. Nothing for a cookie banner to declare.
• No visitor tracking. We don’t fingerprint, profile, or follow your visitors around the web.
• No personal data about your visitors is stored. The only usage data we keep is anonymous, aggregate view and click counts per widget — a number going up, nothing more.
• Public review content only. The reviews shown are your business’s public Google reviews, as already published by Google.
• Isolated by design. The widget renders inside a Shadow DOM, so it can’t read or interfere with the rest of your page.
• UK-based company. WeWidget is built and operated in the UK, subject to UK GDPR.

What the widget actually does

When someone visits a page with your widget on it, their browser loads a small script from our servers and fetches your cached Google reviews to display. When the widget is seen or clicked, it sends us a tiny event containing only your widget’s ID and the event type (“impression” or “click”) — so you can see how your reviews are performing in your dashboard. That event contains no cookie, no visitor ID, and no personal information about the visitor.

What about the request to our servers?

We want to be straight with you: the widget does load from app.wewidget.app, so your visitor’s browser makes a standard web request to our servers — exactly like loading an image from a CDN. As with any web request anywhere on the internet, our servers transiently see technical details like the visitor’s IP address and browser user-agent while serving the response. We do not store these against the visitor, build profiles from them, or use them for tracking. What we record is only the anonymous event described above, plus the domain your widget is installed on (your website’s address — not your visitor’s data) so we can support you.

Any provider whose widget “makes no external requests” either ships the reviews inside your own site build or isn’t being accurate — a hosted widget always involves a request. The GDPR question that matters is what happens with that request, and in our case the answer is: it’s served and forgotten.

What about the reviewers themselves?

Displaying Google reviews means showing reviewers’ public names, avatars, and review text — information those reviewers have already published on Google, where it is publicly visible to anyone. WeWidget displays this public content as-is; we don’t collect anything additional about reviewers.

What this means for your cookie banner

Because the widget sets no cookies and stores no personal data about your visitors, adding it to your site typically doesn’t require new consent prompts or cookie-banner entries. (We’re a widget company, not a law firm — if you have specific compliance requirements, check with your own advisor.)

Your account data

This page covers your website’s visitors. For how we handle your own account data as a WeWidget customer, see our Privacy Policy.

Questions?

Email us at hello@wewidget.app — a real person will answer.