Privacy Policy
Cart Bump · Last updated: September 16, 2026
Cart Bump ("the App") is developed by Digital Cartel ("we", "us", "our"). This policy explains what data the App handles, what we store, and your rights.
Summary
No shopper personal data is processed by the App. On your storefront the App makes no requests to our servers at all. We store a small amount of store-level information so that billing works, and we delete it when you uninstall.
What the App Does on Your Storefront
Cart Bump is a theme app extension. The offer is rendered by your theme, using settings you save in the theme editor.
- No requests to us from the storefront. The block sends nothing to our servers when a shopper views or uses it.
- Adding an item uses your own store. When a shopper taps the offer button, the App calls your store's own cart endpoint on your own domain. Nothing is routed through us.
- No cookies are set by the App on shopper devices.
- No tracking. No analytics, no pixels, no fingerprinting, no advertising networks.
- No shopper data. The App does not read, collect, transmit or store customer names, email addresses, addresses, payment details, order history or IP addresses.
The App does add a hidden line item property named _cart_bump to items a shopper
adds through the offer. It records which offer slot was used, nothing else. That property is
stored by your store on your order, in your own admin, and it is never sent to us.
What the App Does in the Theme Editor
Only while you are editing your theme, and never on the live storefront, the App asks our server whether your store is on the paid plan. That request carries your myshopify domain and the app handle, and nothing else. No shopper is involved, and the response is a single true or false value used to show you the correct upgrade note.
What We Store
Billing runs through Shopify's own subscription system. We never see or handle card details. To keep your plan status correct we store, per installed store:
- Your myshopify domain
- An offline access token issued by Shopify at install, used only to write your plan status back to your own store
- Your plan status (whether the paid plan is active) and the time it last changed
That is the complete list. It is store-level configuration, not personal data about you or your shoppers.
The App requests a single Shopify permission, read_themes, which is read-only
access to your themes. It cannot change your theme, and it has no access to your products,
orders or customers.
What We Do Not Collect
- Customer data (names, emails, addresses, payment information)
- Order contents, product catalogues or revenue figures
- Analytics or behavioural tracking data
- Browsing behaviour of your store visitors
- Shopper IP addresses
- Any personal information of any kind
Data Storage & Security
The three items listed above are held in an encrypted key value store operated by our hosting provider, reachable only by our server over TLS with a private credential. Your block settings (products, offer text, colours, layout, targeting rules, dates) live entirely in Shopify's own theme settings and never reach us.
Data Retention
When you uninstall the App, Shopify sends us an uninstall notification and we delete your stored domain, access token and plan status. Shopify removes the theme extension automatically. Your theme settings may remain in your theme until you remove the block yourself.
Third-Party Services
The App integrates with no third-party analytics platforms or advertising networks. Our server runs on Vercel, which hosts the endpoints described above. Billing is handled entirely by Shopify.
Your Rights
You can:
- Remove the Cart Bump block from your theme at any time via the theme editor
- Cancel the paid plan at any time from your store's app subscriptions
- Uninstall the App, which deletes everything we hold for your store
- Contact us with any question about this policy or to request deletion sooner
GDPR, CCPA & POPIA
No shopper personal data is processed, stored or transmitted by the App, so no consent banner, data subject request handling or data processing agreement is required in relation to Cart Bump. We answer Shopify's mandatory data request, customer redaction and shop redaction webhooks, and because we hold no customer records those requests return nothing to redact.
Changes to This Policy
We may update this policy occasionally. Changes will be reflected on this page with an updated date. Continued use of the App after changes constitutes acceptance.
Contact Us
For privacy questions, please contact us at:
support@digitalcartel.online