Privacy and security

Last updated: October 23, 2026

All fetching is server-side; visitors never contact a review site through MuRu Reviews and no visitor data is sent to any source.
Credentials stay in your Joomla component parameters on your server and are masked from every error message.
Output uses no CDN scripts, fonts or images. The only remote requests from the page are Google's required attribution links and lazy-loaded reviewer avatars (with an initials fallback).
The review cache is a PHP file that begins with a die guard, so it discloses nothing even if direct access is attempted.
Outbound connections overall: Joomla update checks, the source APIs you enable (on refresh), and Pro licence verification.
No scraping - ever. Every connector uses an official API with your own credentials.