Privacy Policy
Last updated: 2026-07-12
The short version
This app collects zero personal data from storefront visitors — no names, no dates of birth, no IP addresses, no cookies, no tracking pixels, nothing. The only thing it records is an anonymous count of how many times the gate was shown, which cannot be tied back to any individual. This isn't a policy choice layered on top of a data-collecting product — the app's actual code has nothing that reads or transmits visitor data in the first place. There is no analytics SDK, no ad pixel, no third-party script.
Because there is no personal data to process, there is no cross-border transfer, no data sale, and no profiling to disclose — this app clears the bar of GDPR, CCPA, and similar regimes by having nothing in scope for them to regulate, not by claiming compliance with language it doesn't back up. We don't monetize on data, so there's no incentive structure pulling in the other direction either.
What this app is
Curfew ("the App") is a Shopify app that adds an age-verification gate to a merchant's storefront. This policy describes what data the App collects, from whom, and why.
Data we collect
From merchants (store owners/staff who install the App):
- Shop domain (e.g. your-store.myshopify.com)
- Shopify access token (via Shopify's standard OAuth flow), used solely to authenticate the App's requests to Shopify's APIs on the merchant's behalf
- Basic account info Shopify provides during installation (name, email) tied to the installing staff account — standard for any embedded Shopify app, used only to operate the App, never used for marketing or shared with third parties
- The App's own configuration for the store: whether the gate is enabled, the minimum age, exit URL, custom message, and (paid tier) which collections are gated
From storefront visitors (the merchant's customers): none, full stop.
- The App does not collect, transmit, or store any personal information about storefront visitors — no names, emails, dates of birth, or IP addresses. A visitor's interaction with the gate (confirmed or declined) is recorded only as an anonymous counter used to show the merchant usage statistics — this counter cannot be traced back to any individual visitor, and no per-visitor record is ever created.
- The gate's "remembered" state (so it doesn't reappear after a visitor confirms their age) is stored only in the visitor's own browser (localStorage), never sent to or stored on our servers.
- No cookies, no third-party analytics, no ad pixels, no session fingerprinting. The gate script makes exactly one outbound network call besides fetching its own settings: an anonymous increment of the usage counter.
How we use data
Solely to operate the App: authenticating with Shopify's APIs, applying the merchant's configured gate settings on their storefront, and (subject to Shopify's own rate limits and eligibility rules) prompting merchants who've used the App for a meaningful amount of time to leave a review via Shopify's native review system.
Data sharing
We do not sell, rent, or share any data with third parties. We do not use any third-party analytics or advertising services within the App.
Data retention and deletion
- When a merchant uninstalls the App, their configuration data is deleted immediately.
- In compliance with Shopify's mandatory privacy webhooks, we also delete all remaining shop data within the required window after uninstallation (shop/redact), and respond appropriately to customers/data_request and customers/redact requests — though as noted above, we do not store any data tied to individual storefront visitors, so there is typically nothing customer-specific to provide or redact.
Your rights
Merchants may contact us at dindiestudio999@outlook.com to ask what data we hold about their store or to request deletion at any time, in addition to the automatic deletion described above.
Changes to this policy
We'll update this page if what the App collects or how it's used changes, and update the "Last updated" date above.
Contact
dindiestudio999@outlook.com — Curfew is developed and maintained independently.