Privacy Policy

CartGuard

Last updated: March 2, 2026

What data we collect

CartGuard collects only the minimum data required to function as a Shopify app:

• Session tokens — Used to authenticate your Shopify admin session. These are stored securely in our database and automatically expire.
• Product tags and product types — Read from your store via the Shopify API to display configuration options. This data is not stored in our systems.

What data we do not collect

We do not collect, store, or process any customer personal data. We do not use cookies, tracking pixels, or analytics on your storefront. The checkout validation runs entirely on Shopify's infrastructure.

How data is stored

Session data is stored in a PostgreSQL database hosted on Railway with encrypted connections. Configuration settings (blocked tags, product types, error messages) are stored in Shopify metafields on your store — we do not maintain a separate copy.

Data retention

Session data is automatically deleted when you uninstall the app. Metafield configuration data remains on your Shopify store and can be managed through the Shopify admin.

Third-party sharing

We do not sell, share, or transfer any data to third parties.

Contact

If you have questions about this privacy policy or want to request data deletion, please contact us at kevin@kwat.me.