Inditex

Who they are. Inditex is a Spanish fashion group (owner of Zara); the dossier covers Bershka, Pull&Bear and Stradivarius.

What is at stake. A shop sees purchases, delivery address and browsing history; a loyalty card ties it all to one person. We found: 30 third-party SDKs in 3 apps, 13 of them for advertising and analytics.

0websites analysed
3apps
30SDKs in its apps
13of them advertising & analytics

Apps

AppEmbedded SDKsSensitive permsDeclared in RuStore
Bershka
com.inditex.ecommerce.bershka 11.16.0
Firebase Cloud MessagingFirebase CrashlyticsFirebase Performance MonitoringGoogle Firebase AnalyticsGoogle Tag ManagerMeta (Facebook) Login / ShareMeta (Facebook) SDKAppsFlyerOneTrust
of which advertising & analytics: 3
SDKs from non-EEA companies: 9
11—
Pull&Bear
com.inditex.pullandbear 2609.0.3
Firebase Cloud MessagingFirebase CrashlyticsFirebase Performance MonitoringGoogle AnalyticsGoogle Firebase AnalyticsGoogle Tag ManagerMeta (Facebook) Login / ShareMeta (Facebook) SDKAdjustOneTrust
of which advertising & analytics: 4
SDKs from non-EEA companies: 9
10—
Stradivarius
com.inditex.stradivarius 2609.0.0
Firebase Cloud MessagingFirebase CrashlyticsFirebase Performance MonitoringGoogle AnalyticsGoogle Firebase AnalyticsMeta (Facebook) Login / ShareMeta (Facebook) SDKAdjustBranchHuawei Ads KitOneTrust
of which advertising & analytics: 6
SDKs from non-EEA companies: 10
15—

A website and an app are treated as one company when the developer domain (from RuStore or the package name) or the signing certificate matches. Built automatically on 2026-10-20.