1. Who we are and what this covers
ShopifyRadar (“we”, “us”) operates shopifyradar.dev and the ShopifyRadar Chrome extension. This policy explains exactly what leaves your browser when you sign in, buy an access pass or use the extension, and what we do with it.
ShopifyRadar is an independent tool. It is not endorsed by, sponsored by, or affiliated with Shopify Inc.
2. What we collect
We collect the minimum needed to run an account and a paid licence. There are three categories:
- Account data from Google. When you sign in with Google, we receive your Google account identifier, email address, display name and profile image URL. We store those plus the time of your last sign-in, so the same Google account always maps to the same ShopifyRadar account.
- Licence and order data. Your plan tier and its expiry date. For each purchase: an order number, the plan you chose, the amount in USD, the payment status, the payment provider’s own transaction reference, the settled amount and currency, the paid-at timestamp, and the raw payment callback we receive so a disputed payment can be reconciled.
- Server logs. Standard request and error logs from our own servers, which can include order numbers and error traces. We do not run third-party analytics of any kind.
3. What we never collect
- Your scraped catalogues. The extension reads publicly available storefront pages inside your own browser and writes the CSV locally. No product, variant, image or storefront data from a scan is uploaded to or stored on our servers.
- Card numbers or wallet keys. Payments are taken on the payment provider’s hosted checkout. We never see or store card details, and we never hold cryptocurrency keys or seed phrases.
- Behavioural tracking. No advertising pixels, no cross-site trackers, no fingerprinting, no session recording. We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising.
4. Cookies and browser storage
The site sets no tracking cookies. When you sign in, we issue a session token (a JWT) that is kept in your browser’s local storage under the key auth_token and sent to our API as a bearer token. Removing that entry signs you out; clearing site data removes it entirely. The extension keeps its own settings in the same browser and does not read this token for unrelated sites.
5. Who we share it with
Only the providers needed to run the service, and only the data each one requires:
- Google — to verify your sign-in and return your basic profile.
- Our payment provider (Cryptomus) — to create and settle your order.
- Our hosting and database provider — where the account and order records described above live.
- Legal requests — where we are required by law to disclose, we disclose the minimum required and, where allowed, tell you first.
6. How long we keep it
Account data is kept while your account exists. If you ask us to delete your account, we remove the account and its profile data within 90 days of a verified request. Order and payment records are kept longer where accounting or tax law requires it, and are limited to what those rules demand. Server logs roll off on our provider’s standard retention window.
7. Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to a specific use. Email [email protected] from the address on the account and we will respond within 30 days.
If you are in the EEA or the UK, the applicable GDPR rights apply to you; if you are a California resident, the CCPA/CPRA rights apply, including the right to know, delete and correct, and the right not to be discriminated against for exercising them. We do not sell personal information, so there is nothing to opt out of on that front.
8. Children
The service is a professional tool and is not directed at anyone under 16. We do not knowingly hold data from a child; if you believe one has signed up, write to us and we will delete the account.
9. Changes to this policy
When this policy changes, the date at the top changes with it. If a change materially widens what we collect, we will say so in the extension and on the pricing page before it takes effect.
10. Contact
Privacy questions, data requests and deletion requests: [email protected]