What we store about shoppers

Nothing that identifies them.

The size finder needs no name, email or account.
What a shopper enters is saved in their own browser, so the next product shows their size. “Delete my answers” removes it.
The widget sets no cookies.

What leaves a shopper’s browser

Anonymous counts, after a shopper acts: opening the size guide, starting the size finder, getting a size, adding to cart from a result. Nothing is sent on a plain page view.
Kept as daily totals per product, such as “14 results in size M”. There are no times and no ids. Each day’s totals are deleted after 13 months.
On add to cart from a result, a random code and the suggested size go on the cart line, so you see the suggested size on the order. Only where analytics are allowed.
Consent: Shopify’s Customer Privacy API decides where consent is needed. In the EU, EEA, UK and Switzerland, nothing is saved for counting, and no cart note is added, until the shopper agrees.

What we store about your store

Store details from Shopify, your plan, your charts, product settings, widget settings, a copy of your product list for fast search, and usage counts.
We never store your staff’s names or emails. We have no access to your orders or customer list.
Charts and settings are also saved in your own Shopify store, as app data, so product pages read them from there.

AI Chart Reader

A photo is made smaller in your browser first. Then it is sent once to Anthropic’s Claude to read the table.
We don’t keep the file. Anthropic doesn’t use it to train its models.
One read runs at a time per store. PDFs are read up to 5 pages.

Where it is processed

Provider	What for	Where
Shopify	The platform, billing, and delivering the widget’s files	Shopify’s network
Vercel	Running the app	Frankfurt, Germany
Neon	The database	Frankfurt, Germany
Anthropic	Reading charts for the AI Chart Reader, only when you use it	May process data in other countries, including the United States
Cloudflare	Our web address, this website and the support mailbox	Cloudflare’s network

How we protect it

Every connection is encrypted.
Each store’s data is kept apart by the database itself, so one store can never read another’s.
Requests from Shopify and from product pages carry Shopify’s signature. We check it, and refuse anything unsigned, wrong or replayed.
Our Shopify keys work only from our own servers’ network.
Only the people who run Shapewiz can open our console. It signs in with passkeys, locks itself when left, and logs every change.
Keys for our services are kept in our hosting settings, never in our code.

When you leave

On uninstall we delete your Shopify keys at once. Shopify removes the charts and settings the app saved in your store.
From Starter, export your charts first (Settings › Data › Export all charts).
48 hours later, Shopify asks us to erase your store, and we delete everything we hold for it. Two internal logs keep only your myshopify address, for 12 months and 90 days.
Any time: Settings › Data › Delete all app data.

Shopify’s privacy requests

We handle Shopify’s three privacy requests (customer data request, customer erasure, store erasure). We hold nothing linked to a shopper, so the first two find nothing to send or erase. Store erasure deletes the store’s data.

Certificates

Shapewiz doesn’t hold security certificates such as SOC 2 or ISO 27001. This page describes what we do instead. Ask us anything at [email protected].

Report a problem

Found a security problem? Write to [email protected].

Security and privacy