Mastiff
Mastiff
This policy explains what the Order Limits app stores, what it does not store, and what happens to your data when you uninstall.
This policy covers the Order Limits app only. Our other apps have their own policies: Barcode Labels and EU Warranty.
| Data | Why | After you uninstall |
|---|---|---|
| Session: your shop domain, the access token and the permissions you granted | Without it the app cannot call Shopify for your store. | Deleted |
| Purchase counts for lifetime limits: customer ID, order ID, products and quantities | To count what a customer bought before, so a lifetime limit works. | Deleted |
| Checkout heartbeat: that a checkout ran while a rule was on, and which rule's message was shown, with Shopify's checkout token (no customer details) | So the app can show you that each rule is working. | Deleted |
| Review prompt state: whether you gave a thumbs up or down in the app | So the app does not ask you for a review at the wrong time. | Deleted |
| App activity log: what you did in the app (for example "app opened", "rule created", "rule turned off"), with no rule text | So we can see which features are used and fix problems. | Kept |
| Whether your shop has a lifetime limit turned on | So the app records purchases only when you use a lifetime limit. | Kept |
| Your answers to short questions in the app (how you found it, what you used before) | So the app does not ask again, and so we know how merchants find the app. | Kept |
| Feedback you send from the app, and your reply email if you give one | So we can read it and answer you. | Kept |
| The order-limit rules you create | They are stored in Shopify metafields on your own store, not in our database. | Removed by Shopify |
Purchase counts for lifetime limits are also saved on the customer record in your store, so the checkout can read them.
If you have no lifetime limit turned on, the app does not record paid orders. It still records cancelled and refunded orders, so that a purchase counted earlier can be taken off the count.
The session row stores your shop domain, the access token and the granted permissions. If you send us feedback and give a reply email, we store that email with your message.
Mastiff never stores customer names, email addresses, phone numbers, shipping addresses or payment details.
At checkout, Shopify runs our rule check with the cart contents and, if the shopper is logged in, their customer ID and purchase count. The check runs inside Shopify and cannot send data anywhere.
No other third party receives data from Mastiff, and there are no third-party analytics or ad trackers. Mastiff adds its own small web pixel to your store. While a rule is on, it tells our server that a checkout ran, and which Mastiff rule message was shown, with Shopify's checkout token. It sends no customer details. The app uses this to show you that each rule is working.
When you uninstall, we delete your session, all purchase counts, the checkout heartbeat and the review prompt state. Shopify removes the app-owned metafields that held your rules. We keep the app activity log, the lifetime-limit setting, your answers to the in-app questions and any feedback you sent (also in our internal event log). To have those deleted too, email us at the address below.
Mastiff handles Shopify's three privacy webhooks. A customer data request returns the purchase counts we hold for that customer. An erase request deletes them.
If you want confirmation in writing that your data has been removed, email the address below and you will get an answer.
If this policy changes, the date at the top changes.
EMERGENESIS LLC
[email protected]