Privacy Policy

Last updated: 2026-10-29

Formkeep (“the app”) adds a sticky add-to-cart bar to a Shopify theme through a theme app extension. This policy explains what the app collects, how it is used and how it is deleted.

Data the app stores

The app stores three kinds of records in its database:

App session: the store's myshopify.com domain, the access token Shopify issues for the app and its expiry, and the granted access scope (read_orders). Used to authenticate the merchant in the Shopify admin and to verify webhooks from Shopify.
Plan: the store's Shopify shop ID, whether it is a development store, and which Formkeep plan it is on (Pay per order or Pro), as reported by Shopify.
Sticky-bar orders: for each paid order that contains an item added with the Formkeep bar, the store domain and the Shopify order ID, whether it was billed, and the date it was cancelled or fully refunded, if that happens. This is used only to bill the Pay per order plan ($0.20 per such order, at most $3.99 per billing cycle), to take cancelled and refunded orders off the bill, and to show the merchant how many orders came through the bar.

Data the app does not collect

Order webhooks are limited by Shopify to three fields: the order ID, whether it is a test order, and the line item properties. Formkeep never receives customer names, emails, phone numbers, addresses, payment details or order totals, and stores no product or inventory data.
On the storefront, the sticky bar runs in the shopper's browser. It uses product and price information that the theme already renders and adds to cart through the theme's own product form. When a shopper adds to cart with the bar, it adds a hidden line item property (_stickify) so the order can be counted. It sends nothing to Formkeep's servers and sets no cookies.
Personalization values shoppers enter (names, phone models, uploaded photos) stay in the theme's product form and go directly to Shopify's cart. Formkeep never receives them.
No analytics, advertising or tracking tools are used.

Bar settings (colors, text, visibility) are saved by Shopify in the merchant's theme, not by Formkeep.

Where data is processed

The app server runs on Vercel and the session database on Supabase (PostgreSQL), both in the EU (Frankfurt). Data is encrypted in transit (HTTPS/TLS) and at rest by these providers. Access to the database is restricted to the app server.

Retention and deletion

Sticky-bar order records are deleted automatically 90 days after the order.
When the app is uninstalled, Shopify notifies the app and the store's sessions and plan are deleted.
Formkeep handles Shopify's mandatory privacy webhooks. A shop/redact request deletes all remaining data for the store, including order records. Because no customer data is stored, customers/data_request and customers/redact have no customer records to return or delete.

Sharing

Formkeep does not sell or share data. The only service providers involved are Shopify (including Shopify App Pricing, which receives one usage event per billed order with the shop ID and an order-based reference), Vercel (hosting) and Supabase (database).

Your rights and contact

Merchants can ask for access to, correction of or deletion of their store's data at any time by emailing cengiztezel9@gmail.com. Shoppers should contact the store they purchased from; Formkeep holds no shopper data.

Gizlilik Politikası (Türkçe özet)

Formkeep şunları saklar: Shopify oturum bilgisi (mağaza alan adı, erişim anahtarı ve süresi, read_orders izni), mağazanın planı (Sipariş başı ödeme veya Pro) ve Formkeep çubuğuyla sepete eklenmiş ürün içeren her ödenmiş sipariş için yalnızca mağaza ve Shopify sipariş numarası. Bu kayıtlar sadece faturalama (sipariş başı $0,20, fatura döneminde en fazla $3,99), iptal/iadelerin faturadan düşülmesi ve mağazaya gösterilen sayaç için kullanılır. Sipariş bildirimleri yalnızca sipariş numarası, test bilgisi ve ürün satırı özelliklerini içerir; müşteri adı, e-posta, telefon, adres veya ödeme bilgisi alınmaz. Çubuk, sepete eklerken gizli bir _stickify satır özelliği ekler; Formkeep sunucularına veri göndermez, çerez kullanmaz. Sipariş kayıtları 90 gün sonra otomatik silinir. Veriler AB'de (Frankfurt) Vercel ve Supabase üzerinde tutulur. Uygulama kaldırıldığında oturum ve plan, shop/redact bildiriminde mağazaya ait tüm kayıtlar silinir. İletişim: cengiztezel9@gmail.com.