WeWidget (“we”, “us”, “our”) provides an embeddable Google Reviews widget service. This policy explains what personal data we collect, how we use it, and your rights.
2. Data we collect
Account data: name and email address provided at sign-up.
Google account data: when you connect your Google Business Profile, we store an encrypted OAuth refresh token to fetch your public reviews. We do not store your Google password.
Review data: publicly visible Google reviews fetched from your Business Profile are cached in our database to serve your widget.
Payment and subscription data: billing is handled by Stripe, which holds your card details — no card numbers are held by us. We store your Stripe customer and subscription IDs, your plan, billing interval and trial dates, a record of the subscription terms you accepted at checkout (which terms, when, the plan and the price), and any cancellation you make (when you asked and when it took effect). We keep these records while your account exists; Stripe keeps its own payment records under its privacy policy.
Usage data: basic analytics on widget impressions (page origin only, no visitor PII).
WordPress plugin setup data: if you set WeWidget up from inside our WordPress plugin, the plugin sends us what you type and choose during setup: the business name you search for, the Google Place ID and business name of the result you pick, the email address you enter, and your site’s address. This happens only when you use those setup controls — never automatically.
WordPress placement data: when you choose or change where the widget should appear on your WordPress site, the plugin sends us three things: which widget it was, the placement you chose (your homepage, every page, or placing it yourself with the shortcode), and a credential that authenticates your installation. That is the whole transmission — it does not include the plugin version or which screen you chose it on. It is sent only after you make that choice — not when the plugin is installed, activated, updated, or when you open your WordPress admin — and it is delivered shortly afterwards in the background. WeWidget then works out one further detail itself: the placement you had before, by comparing your new choice with the most recent placement already recorded for that widget. The plugin does not send us your previous placement, and we use the comparison to skip recording a change when nothing actually changed. We use all of this to see whether WordPress setup reaches the point where the widget actually has somewhere to appear, and to help when it does not.
The installation credential: the plugin also sends a credential we issued to that installation during setup, so we can confirm a placement report really came from it. It authenticates the widget installation and is linked to the WeWidget account that owns that widget. It contains no information about your site’s visitors. We do not store the credential itself — we check its signature mathematically each time a report arrives. No page or post content, page addresses, visitor activity, WordPress logins or Google credentials are sent with any of this.
Acquisition data (only if you accept optional cookies): when you accept, we keep the campaign details from the address of the page you are on at that moment — campaign (UTM) parameters, an advertising click identifier such as Google’s gclid, wbraid or gbraid or Meta’s fbclid, the referring page and that page’s path — in your browser’s local storage, and attach them to your account if you sign up, so we can see which channels bring customers. If you decline, or never choose, none of this is stored or sent. See Cookies and similar storage.
3. How we use your data
To provide the widget service and sync your Google reviews.
To process payments and manage your subscription.
To send transactional emails (account, billing, review sync status).
To improve the service based on aggregate usage.
4. Google user data & Limited Use
WeWidget's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We access your Google Business Profile data solely to display your business's reviews and rating on websites you choose, at your direction.
We only read review and rating data — we never edit your listing, and never reply to, create, or delete reviews.
We do not sell Google user data, use it for advertising, or transfer it to third parties except as necessary to provide the service you requested or as required by law.
No humans read your Google data except with your explicit permission (e.g. a support request), for security purposes, or where required by law.
You can revoke WeWidget's access at any time from your dashboard or at myaccount.google.com/permissions. On disconnection we delete the stored refresh token; cached review data is removed when your account is deleted.
5. Third parties
Google: review data is fetched via the Google Business Profile API under their Terms of Service.
Google Ads: not currently used on this site — we do not load Google’s advertising tag (see Cookies and similar storage).
Cloudflare Turnstile: a security check on the sign-up, sign-in and password-reset forms that helps block automated abuse.
Your choice in the cookie banner applies to both wewidget.app and app.wewidget.app. Nothing optional runs unless you choose Accept: before you choose, and if you decline, we do not create a visitor ID, record your page views or keep advertising attribution. We do not currently load Google’s advertising tag at all, whether or not you accept.
This section describes pages loaded from the current version of the site. A page that was already open when the site was updated can keep running the older version until it loads afresh — including Google’s advertising tag and that version’s own tracking. Reload any tab you opened before the update so that it follows what is described here.
Always used (needed for the site to work)
Your cookie choice (ww_cookie_consent): remembers whether you accepted or declined, for 180 days, shared across wewidget.app and app.wewidget.app.
Sign-in: cookies that keep you signed in to your dashboard.
Security check: Cloudflare Turnstile on the sign-up, sign-in and password-reset forms.
Hand-offs between pages: details you entered, kept in your browser for a short time so the next step can use them — for example the business you picked before signing up, the plan you chose, or a referral code from a WeWidget customer’s link (kept for up to 30 days so that customer can be credited if you sign up).
Only if you accept
Visit counting: a random visitor ID (ww_vid) in your browser’s local storage, sent with each page you view along with the page path, the referring page and any campaign or click identifier in the address, so we can count visits and unique visitors.
Campaign attribution: the acquisition data described above (wewidget_attribution, in local storage).
Sign-up journey measurement: a random ID kept only for your current browser tab, linking a business search on our homepage to a sign-up.
Google Ads: switched off
We do not currently load Google’s advertising tag on wewidget.app or app.wewidget.app, whether or not you accept. So pages loaded from this version do not use that tag to report your page views, what you do in forms or a new sign-up to Google Ads, and do not add you to remarketing lists. If you accepted on an earlier visit, advertising cookies the tag set then (such as _gcl_au) may still be in your browser. Nothing on this site uses them now, and declining removes the ones on wewidget.app.
Changing your mind
Use Cookie settings — in the site footer, in the dashboard menu and on its Help & Support page, on the sign-in and sign-up pages, or here — to accept or decline at any time. If you decline after accepting, we stop our own optional measurement straight away and delete the optional cookies and storage our site can reach: the visitor ID, the campaign attribution, the sign-up journey ID and any Google advertising cookies and storage left on wewidget.app by an earlier visit (such as _gcl_au). Because Google’s advertising tag is not loaded, the page you are on does not need to reload or be limited.
Other tabs of the site that are running this version follow your choice too. Each one checks your stored choice again before it records anything, so none of them records anything more. A tab removes the optional storage it can reach once it learns of your choice. Tabs on the same address learn straight away. Between wewidget.app and app.wewidget.app a tab learns straight away in browsers that support the Cookie Store API. In other browsers it checks every couple of seconds while you can see it; a tab in the background can take longer, because browsers slow down or pause background tabs, and learns at the latest when you return to it. A tab still running an older version does not follow your choice in this way until you reload it.
We cannot delete cookies that Google sets on its own domains — you can remove those in your browser settings — and declining does not delete measurements that were already sent.
7. Data retention
Your data is retained while your account is active. You may delete your account at any time by contacting us, which removes your profile, cached reviews, and Google connection. Stripe billing records are retained as required by law.
Setup and placement records from the WordPress plugin are kept in our internal event log. We have not set a fixed deletion period for that log, so it should be assumed to be kept indefinitely.
When an account is deleted, the direct link from these records to that profile is removed. The records themselves are kept, and are not anonymous: the details stored at the time remain, and can include your site address, the Google Place ID of your business, the widget identifier, the placement chosen and the date. Those details may still identify, or make it possible to identify, the site or business the record came from.
If you want these records deleted as well, email us and we will remove them. This is a manual job rather than an automatic one, so please ask explicitly — deleting your account on its own does not remove them. It is easiest for us if you ask before the account is deleted, or tell us your site address or widget ID afterwards, as those are what we search on.
8. Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data. Contact us at hello@wewidget.app for any data request.