Privacy Policy
Last Updated: December 17, 2025
Introduction
This Privacy Policy describes how Cartcheck ("we," "us," or "our") collects, uses, stores, and protects information when you use our Shopify application ("App"). By installing and using Cartcheck, you agree to the collection and use of information in accordance with this policy.
Cartcheck is a cart tracking application designed to help Shopify merchants monitor and analyze shopping cart activity on their online stores.
Information We Collect
1. Merchant Information
When you install Cartcheck, we collect and store:
- Shop Information: Your Shopify store domain and shop identifier
- Authentication Data: OAuth access tokens and session information required to communicate with Shopify's APIs
- Account Information: Basic account details provided by Shopify during the authentication process
2. Customer Shopping Cart Data
To provide our cart tracking services, we collect the following information about shopping carts on your store:
- Cart Identifiers: Shopify cart IDs and cart tokens
- Cart Contents: Product information including titles, quantities, prices, SKUs, variant details, vendor information, and product images
- Cart Value: Total cart value, currency, and item counts
- Cart Notes: Any notes added to the cart by customers
- Timestamps: When carts are created, updated, and last accessed
3. Customer Information (When Available)
When customers are logged in or proceed to checkout, we may collect:
- Contact Information: Email address and phone number
- Customer Identifiers: Shopify customer ID
- Name: First name, last name, or full name from customer accounts or checkout information
Important: We only collect customer information that is available on the storefront when customers are logged in. We do not collect sensitive information such as payment details, passwords, or complete addresses.
How We Collect Information
We collect information through the following methods:
- Theme App Extension: A lightweight tracking script embedded in your storefront syncs cart data with our servers when customers browse your store. This script reads cart information from Shopify's standard cart API.
- Shopify Admin API: We use authorized API calls to verify app configuration and theme settings.
How We Use Information
We use the collected information solely to:
- Provide Cart Tracking Services: Display cart information, statistics, and analytics in your Shopify admin dashboard
- Monitor Cart Activity: Track active and abandoned carts in real-time
- Generate Reports: Provide insights on cart values, item counts, and customer engagement
- Maintain App Functionality: Ensure proper operation and synchronization of cart data
- Improve Our Services: Analyze aggregate usage patterns to enhance app performance and features
Data Storage and Security
Storage
- All data is stored in secure PostgreSQL databases hosted on Railway's cloud infrastructure
- Data is associated with your specific Shopify store and is isolated from other merchants' data
- We retain cart data for as long as you have the app installed, unless you request earlier deletion
Security Measures
We implement appropriate technical and organizational measures to protect your data, including:
- Encrypted data transmission using HTTPS/TLS
- Secure authentication via Shopify's OAuth 2.0 protocol
- Webhook verification to ensure data authenticity
- Access controls limiting data access to authorized systems only
- Regular security reviews and updates
Data Sharing and Disclosure
We do not sell, rent, or trade your data to third parties.
We may share information only in the following limited circumstances:
- Service Providers: With trusted infrastructure providers (such as Railway for hosting and PostgreSQL for database services) who assist in operating our app, subject to confidentiality obligations
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected users
Data Retention and Deletion
- During Use: We retain cart and session data for as long as Cartcheck is installed on your store
- Upon Uninstallation: When you uninstall Cartcheck, we automatically delete all cart data and session information associated with your store
- Manual Deletion: You may request deletion of your data at any time by contacting us
Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Request your data in a portable format
- Objection: Object to certain processing of your data
To exercise these rights, please contact us using the information provided below.
Merchant Responsibilities
As a merchant using Cartcheck, you are responsible for:
- Informing your customers about data collection through your own privacy policy
- Ensuring compliance with applicable privacy laws (GDPR, CCPA, etc.) in your jurisdiction
- Obtaining any necessary consents from your customers for data collection
- Responding to customer inquiries about their personal data
Third-Party Services
Cartcheck integrates with:
Children's Privacy
Cartcheck is designed for use by Shopify merchants and is not intended for use by children under 16 years of age. We do not knowingly collect personal information from children.
International Data Transfers
Your data may be processed and stored in countries other than your own. By using Cartcheck, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Updating the "Last Updated" date at the top of this policy
- Providing notice through the app or via email for significant changes
Your continued use of Cartcheck after any changes indicates your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: bl1nd.dev@outlook.com
Summary of Data Collected
| Data Type | Purpose | Retention |
|---|
| Shop domain & ID | App functionality | Until uninstall |
| OAuth tokens | API authentication | Until uninstall |
| Cart IDs & tokens | Cart tracking | Until uninstall |
| Cart contents (products, prices) | Display & analytics | Until uninstall |
| Customer email & phone | Cart identification | Until uninstall |
| Customer name | Cart identification | Until uninstall |