Skip to content

Security and data

What the app stores, where, and for how long

A plain account of what the app holds, where it runs, who can reach it and when it is deleted. It lists only what is true today.

What the app stores

  • Catalogue data: product and variant IDs, names, prices, price-change times and currency.
  • Your shop settings.
  • For withdrawal requests only: the shopper’s name, email, order number, items, language and the time of the request.

What it does not do

  • It sets no tracking cookies on your storefront.
  • It does not sell data.
  • It does not store shopper details for anything other than withdrawal requests.

Where it runs

  • The service runs on Cloudflare Workers, and the data is held in Cloudflare D1.

Encryption

  • Data is encrypted in transit with TLS.
  • Data is encrypted at rest in D1.

Access

  • Every request from the dashboard carries a token signed by the shop platform, which the service checks before it returns anything.

Retention and deletion

  • Withdrawal records are deleted after 3 years, when the app is uninstalled, or on request.
  • To ask for deletion, write to the privacy address below.

Sub-processors

  • Cloudflare, which hosts the service.
  • The shop platform the app is installed on, for sign-in, billing and email delivery.

This website

  • Static pages, no cookies, no third-party scripts or fonts, no analytics by default. The only forms are mailto links that open your own email program.

Documents and contact

The full terms, and who to write to

The full terms are in the privacy policy and the data processing agreement. The operator’s details are in the legal notice.

Questions about data, or a deletion request: privacy@storecompliant.com. To report a security concern, write to support@storecompliant.com. See also contact and support.

Put the three EU notices on your storefront

Free for up to 50 products. Set-up takes a few minutes and needs no code.

Shopify is in development and WooCommerce is planned. See all platforms.