# Security & Privacy Scorecard

## Paris - Tu Tienda Online

**Version:** 4.2.3 (Build 329) | **Scan Date:** January 23, 2026

**Overall Security Score: 35/100** | **Overall Privacy Score: 25/100**

## What This Means for You

Browsing, purchase activity, and behavior are shared with advertising and analytics companies including Meta and AppsFlyer. Users have very limited control over what is collected or how it is used. Account and payment data may not be fully protected across multiple areas of the app.

## Recommendation: Use With Caution

**Best For:** Paris store shoppers comfortable with broad data sharing

## Key Findings

**Data Security** - 6 findings (1 critical, 2 high, 3 medium)

**Network Security** - 2 findings (2 high)

**Code Safety** - 0 findings

**Privacy** - 7 findings (4 critical, 2 high, 1 medium)

## Privacy Concerns

### What Data is Collected

The app collects in-store browsing history, search queries, purchase records, device identifiers, and behavioral patterns across sessions. Collection begins when the app is opened, before any purchase or account login.

### Third-Party Data Sharing

User activity is shared with the following third-party services:

- **Meta/Facebook** - Advertising targeting and behavioral profiling
- **AppsFlyer** - Marketing attribution and analytics tracking
- **Firebase** - App analytics and performance data
- **Constructor.io** - Search behavior and personalization
- **NewRelic** - Application performance monitoring
- **SEON** - Fraud detection services
- **Google Play Services** - Core platform services
- **Storyly** - In-app content personalization
- **Chucker** - Network diagnostics

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 35/100 |
| Privacy | 25/100 |
| Data Security | 30/100 |
| Network Security | 70/100 |
| Code Safety | 35/100 |
| Data Collection | 20/100 |
| Data Sharing | 25/100 |
| User Control | 15/100 |

## Positive Security Features

- Standard transport security is applied to most network communications, reducing the risk of interception on public Wi-Fi networks.

## Areas for Improvement

- The way account and payment information is protected needs significant strengthening to reduce exposure to unauthorized access.
- The number of advertising and analytics companies that receive user behavioral data should be reduced, and users should be given clear options to limit sharing.
- Meaningful controls over what is collected from the device and how it is used to build advertising profiles are currently missing.

---

## About This Analysis

This scorecard reflects static analysis of the app as distributed. Scores and findings represent the state of the app at the time of this assessment. Apps are updated regularly, and security practices may change between versions.

### App Details

| Field | Value |
|---|---|
| App Name | Paris - Tu Tienda Online |
| Package ID | com.cencosud.parisapp.android |
| Version | 4.2.3 (Build 329) |
| Scan Date | January 23, 2026 |