Starship
starship / search / age-verification-popup-verify-customers

Audit report

Age Checkify ‑ Age Verify

Broad accessReach : broad

by Zooomyapps · Store design · Shopify App Store

Store design
Risk level
Broad access
Executive summary

Age check - Age bound Age verify - restrict age customer age

Key insights

  • ◆Small-footprint age-verification popup app from publisher Zooomy (Zooomyapps), launched 2018, 5.0/23 reviews.
  • ◆Not 'Built for Shopify' badged.
  • ◆Requests theme + admin files write scopes plus store-owner and blog-contributor data access.
  • ◆Privacy policy states data is deleted on uninstall but discloses no sub-processors or hosting region.

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Age check - Age bound Age verify - restrict age customer age

Key insights
  • ◆Small-footprint age-verification popup app from publisher Zooomy (Zooomyapps), launched 2018, 5.0/23 reviews.
  • ◆Not 'Built for Shopify' badged.
  • ◆Requests theme + admin files write scopes plus store-owner and blog-contributor data access.
  • ◆Privacy policy states data is deleted on uninstall but discloses no sub-processors or hosting region.
  • ◆No known CVEs or public breaches tied to Zooomyapps or Age Checkify.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_users_store_owner
Medium

Store owner PII (name, email, phone, address) accessed.

read_blog_contributors
Medium

Blog contributor email, IP, browser, OS, moderate PII.

write_themes
High

Edit Online Store pages/theme allows arbitrary script injection into storefront.

write_files
Medium

Edit Shopify admin files; broader than needed for a popup.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
zooomyapps.com
TLS grade
A
HSTS
Missing
CSP
Missing

Cloudflare-fronted; no HSTS or CSP headers observed on root.

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

Policy references PCI-DSS language but no certification attestation; no GDPR/CCPA/SOC2/ISO claims.

Privacy policy
Track record

Publisher reputation

Publisher
Zooomyapps
Verified Shopify Partner
No
Years active
8
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.