Privacy policy

Stillcode is a Shopify app that makes QR codes for a store's products, collections and pages. This policy explains what data the app reads, what it keeps, and how it is deleted.

Stillcode is developed and operated by Bin Rozenblum ("we"). For anything in this policy, write to support@binrozenblum.co.il.

What the app reads and changes in your store

Stillcode asks Shopify for two permissions. Read products: for the products, variants and collections you pick, it reads their title, handle and status. Write online store navigation: it creates, updates and deletes the URL redirects under /qr/ that your codes use, and reads them to check that each code still works. It doesn't touch your other redirects, menus or anything else in your store. It also reads the store name, primary domain and your Stillcode plan.

Stillcode does not read orders or customers, and it has no access to customer names, email addresses, phone numbers, addresses or payment details. When a shopper scans a code, the request goes to your own store, not to our server, so we never see who scans.

How codes and files are made

QR codes, PNG and SVG images, ZIP files and PDF sheets are drawn in your browser. The files are created on your computer and are never uploaded to our server.

What we store, and for how long

• Your codes: each code's name, short path (for example /qr/k7m2p), what it opens (the product, variant or collection ID and handle, or the page path), the optional discount code and quantity, and the ID of its redirect.
• Your code design: the colours and, if you upload one, your logo image.
• Store details: store name, primary domain, last known plan, and the dates used to decide when to show Shopify's review prompt.
• Shopify access token: the credential Shopify issues when you install the app, needed to manage the redirects on your behalf.
• Server logs: technical logs record the store domain, the time and the type of request or error. Web server access logs are deleted after 14 days.

How the data is used

Only to provide the app to you. We do not use store data for advertising or profiling, we do not use it to train any model, and we do not combine it with data from other stores.

Who we share data with

We do not sell, rent or trade any data. We share data only with the providers that run the app:

• Shopify, the platform the app runs on, which also handles billing.
• DigitalOcean, which hosts the app server and its database in Frankfurt, Germany.

We may disclose data if the law requires it, and we will tell you unless we are not allowed to.

Deletion and privacy requests

• Uninstalling Stillcode deletes your access token right away. The redirects stay in your store, because they are yours and your printed codes depend on them. You can see and delete them in Shopify under Content › Menus › URL redirects.
• Shopify's shop data erasure request, sent 48 hours after you uninstall, deletes your codes list, design and store details from our database. If you reinstall within those 48 hours, your list is still there.
• Shopify's customer data request and customer data erasure requests: Stillcode holds no customer data, so there is nothing to report or delete.

You can ask us at any time to access, correct or delete the data we hold about your store, including under the GDPR or the CCPA. We answer within 30 days.

Security

All traffic is encrypted with HTTPS. The database is not reachable from the internet, and access to the server is limited to the developer. If a security incident ever affects your data, we will tell you and Shopify without undue delay.

Changes to this policy

If we change how Stillcode handles data, we will update this page and its date. For significant changes we will tell you in the app before they take effect.

Contact

Questions, requests or complaints: support@binrozenblum.co.il.

See also the Terms of service.