StoreBundle privacy policy
Last updated: 10 November 2026
StoreBundle is a Shopify app with five tools: Country Blocker, Geo Redirect, Visitor log, Content Protection and a Terms and Conditions checkbox. This policy explains what information the app collects from merchants who install it and from visitors to their stores, why, how long it is kept and how it is deleted.
Who we are
StoreBundle is run by Storebundle IO, 8 The Green Ste R, Dover, DE 19901, United States.
For any privacy question or request, email [email protected].
Information about merchants
When a store installs StoreBundle, we store:
- Shop details: the store's myshopify.com address; its StoreBundle subscription (the Shopify subscription ID, status, plan name, price and currency); and the dates the app was installed, uninstalled and first subscribed (used to give the free trial only once).
- Shopify access: the access token and refresh token Shopify gives the app, so it can work with the store. Both are encrypted (AES-256-GCM) before they are saved. We don't store the names or email addresses of store staff.
- Tool settings: what the merchant sets up in the app, such as the countries to block or allow, redirect rules and addresses, the texts of the block screen, redirect popup and Terms checkbox, IP addresses the merchant chooses to always allow or always block, and the Content Protection options.
The settings the storefront needs to show the Terms checkbox and Content Protection are also saved in the merchant's own Shopify store, in a field that belongs to the app. Country Blocker and Geo Redirect rules are never sent to the storefront.
Information about store visitors
Country Blocker and Geo Redirect
When either tool is on, each page view on the store asks our server whether the visitor should be allowed, blocked or redirected. When the merchant's rules need it, we look up the country of the visitor's IP address and whether it belongs to a VPN, proxy or Tor network.
- The lookup is done by proxycheck.io. Only the visitor's IP address is sent to it. The result is kept in our server's memory for up to one hour, so repeat page views don't need a new lookup.
- For visitors who are allowed in, nothing is saved.
Visitor log
For visitors who are blocked or redirected, and only while the merchant has the visitor log switched on, we save:
| What | Why |
|---|---|
| IP address | To show the merchant who was blocked or redirected, and to let them whitelist an address |
| Country | To show where the visit came from |
| Reason (country, VPN or proxy, IP rule, redirect rule) | To explain why it happened |
| Page path (for example /collections/sale) | To show which page was visited |
| Browser user agent | To help the merchant recognise bots |
| Number of visits, first and last seen | For the counts and charts in the app |
Log entries are deleted automatically 30 days after the visitor was last seen. The merchant can delete any entry, clear the whole log or switch logging off at any time.
In the visitor's browser
To avoid asking our server on every page, the storefront script remembers an allowed or blocked result, and whether the redirect popup was closed, in the browser's session storage until the browser tab is closed. When a merchant opens a preview link from the app, a preview token is kept in that browser's local storage until the preview is switched off. StoreBundle sets no cookies and does no tracking or advertising.
Terms and Conditions checkbox
When a shopper ticks the checkbox, the storefront script saves Terms accepted: Yes on their cart in Shopify, so it appears on the order in the merchant's Shopify admin. StoreBundle's servers don't receive or store it.
Content Protection
Content Protection runs only in the visitor's browser. It sends nothing to StoreBundle and stores nothing.
How we use information
Only to run StoreBundle's features for the merchant who installed it, to bill the subscription through Shopify, and to keep the service secure and working. We don't sell information, use it for advertising or share it with anyone other than the service providers below.
Service providers
- Shopify: the platform the app runs in. Subscriptions are billed by Shopify; we never see payment card details.
- DigitalOcean: hosts the app and its database. Our request logs record only the method, path, status and timing of each request, never query strings, tokens or visitor IP addresses.
- proxycheck.io: the country and VPN lookups described above (IP address only).
Uninstalling and deletion
- When a store uninstalls the app, its Shopify access and refresh tokens are deleted straight away and its subscription details are cleared. The store's settings and visitor log are kept for now, so they come back if the merchant reinstalls soon.
- 48 hours after uninstalling, Shopify sends us a request to erase the store's data. We then delete everything we hold for that store: its shop details, tokens, tool settings and the whole visitor log.
- The only thing kept after that is a one-way SHA-256 hash of the store's myshopify.com address and the date its free trial was used, so the trial isn't given twice. It contains no other information. A merchant who wants it removed too can email [email protected].
Requests about customers
Shopify forwards requests from a store's customers to see or erase their data. StoreBundle stores nothing linked to a Shopify customer account: the visitor log is kept by IP address, not by customer, and is deleted after 30 days. So there is nothing to return or delete, and we confirm this to Shopify. Store visitors who want an entry in a visitor log removed can ask the store, which can delete it in the app, or email us.
Security
All connections to StoreBundle use HTTPS, and Shopify tokens are encrypted at rest.
Changes to this policy
If we change what the app collects or how it is used, we will update this page and the date at the top.
Contact
Questions or requests: [email protected].