Ecommerce & Payments:

Overall

WooCommerce

Ecommerce & Payments

70

Mixed

Weakest: Ads & Tracking

The weakest area is the extension layer: payment plugins, analytics, ads, and hosted add-ons can all widen the store's privacy footprint.

Strongest: User Control

WooCommerce is strongest where store owners can manage exports, erasure requests, and customer-data handling directly from the admin side.

Recommended Action:

Audit plugins and payment add-ons instead of assuming WooCommerce is the whole data surface.

Learn more

Shopify

Ecommerce & Payments

65

Mixed

Weakest: Ads & Tracking

The weakest area is still tracking and data spread across storefront analytics, marketing tools, apps, and long-lived customer records.

Strongest: User Control

Shopify is strongest where merchants can manage exports, app permissions, store operations, and customer-data workflows from one admin surface.

Recommended Action:

Review app permissions, Shopify Magic use, and customer data-retention settings.

Learn more

Stripe

Ecommerce & Payments

65

Mixed

Weakest: Ads & Tracking

Its weakest area is still tracking around account and web usage, plus the unavoidable exposure that comes with payment and fraud data.

Strongest: User Control

Stripe is strongest where businesses can manage roles, connected accounts, exports, and privacy requests through a mature admin surface.

Recommended Action:

Review who can access Stripe dashboards, exports, and connected accounts.

Learn more

BigCommerce

Ecommerce & Payments

60

Mixed

Weakest: Ads & Tracking

BigCommerce is weakest on ads and tracking because cookie-based tracking remains part of the product or marketing site and ad personalization or marketing measurement still shows up.

Strongest: User Control

BigCommerce gives users more direct privacy control than its other categories, especially around account settings, deletion, and privacy requests.

Recommended Action:

Review store apps, checkout/payment settings, customer exports, and analytics pixels.

Learn more

PayPal

Ecommerce & Payments

60

Mixed

Weakest: Ads & Tracking

The weakest area is the surrounding tracking and profiling layer built from payments, merchants, devices, and web activity.

Strongest: User Control

PayPal is strongest where users can manage privacy settings, data requests, connected merchants, and account-level permissions directly.

Recommended Action:

Review account privacy settings, connected merchants, and marketing preferences.

Learn more

Amazon Shopping

Ecommerce & Payments

50

Weak

Weakest: Ads & Tracking

The weakest area is the combined shopping profile built from purchases, searches, devices, Alexa connections, and cross-service ad signals.

Strongest: User Control

Amazon is strongest where users can manage ad preferences, browsing history, device links, deletion requests, and account-level privacy choices.

Recommended Action:

Review ad preferences, browsing history, and Alexa or device links in the account.

Learn more

Facebook Marketplace

Ecommerce & Payments

45

Weak

Weakest: Ads & Tracking

Facebook Marketplace is weakest on ads and tracking because ad personalization or marketing measurement still shows up.

Strongest: User Control

Facebook Marketplace gives users more direct privacy control than its other categories, especially around account deletion.

Recommended Action:

Review Activity from other businesses, ad personalization, Meta AI interaction settings, and connected apps.

Learn more