Privacy policy

Last updated: 2026-10-17

This policy explains what data the ShipMeter: Free Shipping Bar app for Shopify (“ShipMeter”, “we”) processes, why, and for how long. ShipMeter is installed by Shopify merchants; for buyer data the merchant is the controller and ShipMeter acts as a processor on the merchant’s behalf.

Short version

We never store buyers’ names, e‑mail addresses, phone numbers, postal addresses, IP addresses, cart line items or browsing URLs.
Statistics are collected only when the buyer has given analytics consent through Shopify’s Customer Privacy API, and are pseudonymous and aggregated.
We do not sell data, do not use it for advertising and do not share it with analytics or advertising companies.

Data about merchants (stores)

Store details from the Shopify Admin API: shop domain and ID, store name, time zone, currency, published languages, Markets and whether checkout extensibility (Shopify Plus) is available — to identify the store and offer the right settings.
Access token issued by Shopify, stored encrypted and deleted when the app is uninstalled.
Settings you create (thresholds, design, texts, placements) and their published versions.
Trial and subscription status received from Shopify billing, to decide whether the bar may be shown.
Audit records of administrative actions with a pseudonymous reference to the staff account (never an e‑mail).

Data about buyers

When the buyer has granted analytics consent, the ShipMeter web pixel and storefront widget record events such as “bar shown”, “threshold reached”, “checkout started/completed”, together with time, the rule and placement, country code, currency and cart/threshold amounts. The Shopify client ID is replaced by a keyed hash specific to the store, and order IDs are stored only as keyed hashes for de‑duplication. Without consent, no analytics events are stored.

Retention

Raw events, sessions and observed checkouts — 30 days.
Daily aggregated statistics and audit records — 13 months.
Operational logs (no personal data) — 14 days.
All store data is deleted after Shopify’s shop/redact request (48 hours after uninstall).

Your rights and Shopify privacy requests

ShipMeter processes Shopify’s mandatory privacy webhooks: customers/data_request (returns records linked to the order IDs in the request), customers/redact (deletes such records and recomputes statistics) and shop/redact (deletes all data of the store). Because we hold no direct identifiers, we cannot look up data by name or e‑mail. Buyers should contact the merchant; merchants can contact us at the address below.

Security

Data is transmitted over HTTPS, access tokens are encrypted at rest, requests from Shopify are verified by signature, and access by our staff is limited, time‑boxed and logged.

Subprocessors

Shopify (platform and billing) and our hosting/database provider. No analytics, advertising or tracking services are used.

Contact

Questions about privacy: sasha.chyrskyy@gmail.com.