Privacy Policy

1. Overview

Track Your Traffic ("the App") is a Shopify application that helps merchants understand their store traffic sources, landing pages, devices, and UTM campaign performance. This Privacy Policy explains what data we collect, how we use it, how long we keep it, and your rights as a merchant or store visitor.

By installing or using the App, you agree to the terms of this Privacy Policy.

2. Data We Collect

Merchant Data

When you install the App, we store your Shopify shop domain and an OAuth session token to authenticate API requests on your behalf. We do not store your name, email address, billing information, or any other personal contact details.

Storefront Visitor Analytics Data

The App tracks storefront visitors on your behalf via a lightweight JavaScript snippet installed on your store. For each visit we record:

• UTM parameters (source, medium, campaign, term, content) — from the URL
• Traffic channel classification (e.g. organic search, paid search, social, email, direct)
• Landing page URL path
• Referring domain
• Device type (mobile / tablet / desktop) — derived from User-Agent string
• Country code — derived from CDN request headers (no precise geolocation)
• An anonymised visitor hash — a one-way SHA-256 hash of IP address + User-Agent + date
• Click ID type (e.g. gclid, fbclid) — for channel attribution only

We do not store raw IP addresses, names, email addresses, phone numbers, cookies, or any other personally identifiable information (PII). The visitor hash is a one-way cryptographic value and cannot be reversed to identify any individual.

3. How We Use Data

We use the data collected solely to provide the App's features:

• Display traffic analytics dashboards to the merchant (visits, unique visitors, channels)
• Attribute visits to UTM campaigns created by the merchant
• Generate aggregated reports by channel, source, device, country, and landing page
• Track campaign performance over custom date ranges

We do not sell, rent, share, or use any data for advertising or marketing purposes. Data is never shared with third parties except those listed in Section 6 (infrastructure providers).

4. Data Retention

Visit data is retained for the period configured by the merchant in the App's Settings page (default: indefinite). Merchants can configure automatic data cleanup windows (e.g. delete data older than 90 days) or manually purge all data at any time from the Data Management tab.

Upon app uninstallation: all analytics data associated with the merchant's shop domain is permanently and irreversibly deleted within 48 hours.

5. GDPR & CCPA Compliance

Because the App does not store PII, individual customer data requests and erasure requests (GDPR Article 15 / Article 17, CCPA) cannot be fulfilled on a per-customer basis — there is no data linkable to a specific individual visitor.

Shop-level data deletion is fully supported and is executed automatically upon app uninstallation. Merchants may also request full data deletion at any time by contacting us at support@addoneplugins.com.

6. Third-Party Services

The App uses the following third-party infrastructure providers:

• Shopify — App platform, OAuth authentication, and webhook delivery. Governed by Shopify's Privacy Policy.
• Vercel — Application hosting and serverless infrastructure. Governed by Vercel's Privacy Policy.
• Supabase / PostgreSQL — Encrypted database storage for analytics data. Governed by Supabase's Privacy Policy.

No data is shared with any other third party beyond the infrastructure providers listed above.

7. Security

We implement the following security measures to protect your data:

• All data is transmitted over HTTPS (TLS encryption)
• Database connections use TLS encryption
• Visitor hashes are computed using SHA-256 and are not reversible
• Each merchant's data is isolated by shop domain — no cross-merchant data access is possible
• No raw IP addresses are stored at any point

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We may also notify merchants via the Shopify App Store listing or in-app notification. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the data we hold, please contact us: