Privacy

The short version

This is a demo storefront. It searches Shopify’s public catalog and sends you to each brand’s own store to check out. You can use all of it without signing in. If you do sign in, we keep your email address, your saved bag, and a record of what you searched for and which merchants you were sent to.

Nothing is sold, nothing is shared with advertisers, and there are no advertising or tracking cookies on this site.

If you never sign in

Nothing that identifies you personally is collected. Your name, your email address and your bag never leave your own browser unless you sign in.

Searches are forwarded to Shopify’s public catalog service so results can come back. Activity on the site is also recorded in our own database: the terms you search for, the products you open, what you add to your bag, and which merchant you were sent to. These records carry a random identifier stored in your browser so they hang together as one visit. That identifier is not linked to any name or email address, is not shared with anyone, and is not used to recognise you on any other website.

Clearing your browser storage for this site discards that identifier, and the records left behind can no longer be connected to you.

Each record also notes how you arrived: the address of the page that linked you here, any campaign tags on the link you followed, and the country the request came from. The country comes from Cloudflare, which sees it anyway in order to serve the page. No precise location is collected and no IP address is stored.

If you sign in

We store, in a database we control directly:

• Your email address, and your name and profile picture if your sign-in provider supplies them.
• How you signed in: with Google, or with a one-time code sent to your email. Passwords are never used and never stored.
• A session record, so you stay signed in between visits.
• Your saved bag, so it follows you from one device to another. That is the main reason to have an account here.
• Your activity, now attached to your account rather than anonymous: searches, products opened, items added, merchants you were sent to, and how you arrived at the site. Activity from earlier in the same browser, from before you signed in, is attached to your account at that point.

This is the honest part. Attaching shopping behaviour to a real account is exactly what this project is a demonstration of. It is not sold, not shared and not used for advertising, and you can have all of it deleted by asking.

Signing in sets one cookie. It identifies your session and nothing else, it is marked HttpOnly so no script on the page can read it, and it is not used to follow you anywhere else on the web.

Payments

No payment information is ever entered here or seen by this site. Checkout always happens on the merchant’s own Shopify store, under that merchant’s own privacy policy and terms.

Who else is involved

• Cloudflare hosts the site and the database, and tells us which country a request came from.
• Shopify receives your search terms through its public catalog service so it can return products.
• WorkOS handles signing in. It receives your email address to send you a one-time code or to complete Google sign-in, and tells us that the address is verified.
• Google is involved only if you choose to sign in with Google, and only tells us your email address and basic profile.
• The merchant you buy from handles your order and your payment. We are not part of that transaction.

Your choices

You can see the merchants you have been sent to and sign out from your account page.

To see what is held about you, correct it, or have your account and everything attached to it deleted, email privacy@example.com. Deletion is permanent and covers the account, its sessions, its saved bag and its activity history.

Children

This site is not intended for children under 13, and accounts should not be created by them.

Changes

If what is collected changes, this page changes with it and the date at the top is updated. Questions go to privacy@example.com.