Paris - Tu Tienda Online Security & Privacy Scorecard
Android
Browsing, purchase activity, and behavior are shared with advertising and analytics companies including Meta and AppsFlyer. Users have very limited control over what is collected or how it is used. Account and payment data may not be fully protected across multiple areas of the app.
Best for
Paris store shoppers comfortable with broad data sharing
Findings
- 7 critical
- 8 high
- 6 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Unencrypted JWT Authentication Tokens in Plaintext Storage
- Universal File Access Enabled in Payment WebView with JavaScript Interface
- 52 Microservice API Keys Hardcoded in Production Build
Top privacy issues
- RUT (Chilean National ID) Transmitted to 8+ Foreign Analytics Vendors
- No Consent Management Before Analytics Initialization
- NewRelic Session Replay Captures Sensitive UI Content in Production
Full analysis
Paris - Tu Tienda Online
Version: 4.2.3 (Build 329) | Scan Date: January 23, 2026
Overall Security Score: 35/100 | Overall Privacy Score: 25/100
What This Means for You
Browsing, purchase activity, and behavior are shared with advertising and analytics companies including Meta and AppsFlyer. Users have very limited control over what is collected or how it is used. Account and payment data may not be fully protected across multiple areas of the app.
Recommendation: Use With Caution
Best For: Paris store shoppers comfortable with broad data sharing
Key Findings
Data Security - 6 findings (1 critical, 2 high, 3 medium)
Network Security - 2 findings (2 high)
Code Safety - 0 findings
Privacy - 7 findings (4 critical, 2 high, 1 medium)
Privacy Concerns
What Data is Collected
The app collects in-store browsing history, search queries, purchase records, device identifiers, and behavioral patterns across sessions. Collection begins when the app is opened, before any purchase or account login.
Third-Party Data Sharing
User activity is shared with the following third-party services:
- Meta/Facebook - Advertising targeting and behavioral profiling
- AppsFlyer - Marketing attribution and analytics tracking
- Firebase - App analytics and performance data
- Constructor.io - Search behavior and personalization
- NewRelic - Application performance monitoring
- SEON - Fraud detection services
- Google Play Services - Core platform services
- Storyly - In-app content personalization
- Chucker - Network diagnostics
Understanding the Scores
| Category | Score |
|---|---|
| Security | 35/100 |
| Privacy | 25/100 |
| Data Security | 30/100 |
| Network Security | 70/100 |
| Code Safety | 35/100 |
| Data Collection | 20/100 |
| Data Sharing | 25/100 |
| User Control | 15/100 |
Positive Security Features
- Standard transport security is applied to most network communications, reducing the risk of interception on public Wi-Fi networks.
Areas for Improvement
- The way account and payment information is protected needs significant strengthening to reduce exposure to unauthorized access.
- The number of advertising and analytics companies that receive user behavioral data should be reduced, and users should be given clear options to limit sharing.
- Meaningful controls over what is collected from the device and how it is used to build advertising profiles are currently missing.
About This Analysis
This scorecard reflects static analysis of the app as distributed. Scores and findings represent the state of the app at the time of this assessment. Apps are updated regularly, and security practices may change between versions.
App Details
| Field | Value |
|---|---|
| App Name | Paris - Tu Tienda Online |
| Package ID | com.cencosud.parisapp.android |
| Version | 4.2.3 (Build 329) |
| Scan Date | January 23, 2026 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #2 (current) | 30/100 | |
| #1 | 38/100 |