Privacy policy
Last updated October 6, 2026
Mint Labs Free Gift is a Shopify app made by Mint Labs ("we", "us"). It adds free gifts to shoppers' carts on a merchant's online store when the merchant's gift rules are met, and applies Buy X Get Y discounts at checkout. This policy explains what the app handles, why, and when it's deleted. For anything about the merchant's visitors we act as a service provider (processor) to the merchant, who is the controller.
The short version
- The app stores no customer data: no customer or order records, no shopper names, email addresses, phone numbers or IP addresses.
- The shopper's cart stays with Shopify. The app's script reads it in the shopper's browser to add or remove the gift; the cart isn't sent to us.
- The checkout discount runs inside Shopify (a Shopify Function). It sees the cart's products, quantities and prices to check the rules, and nothing about the customer; it can't send data anywhere.
- We never sell or share data, use it for advertising, or combine it across stores. The app sets no cookies.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To check the gifts you choose, create and update the app's automatic discount, and save the storefront settings. |
| Store name, primary domain, currency, time zone, app installation ID | The app home and links to the store; spend amounts are in your currency and rule dates in your time zone; the installation ID owns the storefront settings. |
| Gift rules: product, variant and collection IDs with their titles, amounts, quantities, texts and dates; settings | To run the rules the way you set them up. |
| Plan (Free, Pro or Plus) and its dates | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
| Daily counts per rule (Plus report): carts that qualified, gifts added | The report in the app. |
| When the app embed was last seen working | The setup checklist on the app home. |
Information about shoppers
| What happens | Details | Kept |
|---|---|---|
| Gift state in the browser | Session storage on the store's domain remembers, for the current visit, a gift the shopper removed (so it isn't added back), gifts that sold out and which collections the cart's products are in. | Until the browser tab is closed |
| Collection lookups | For a product added after the page loaded, the store asks the app proxy which of the rules' collections it's in (product handles only). Shopify answers it on the store. | Not stored |
| Report counts (Plus) | The rule ID and whether the cart qualified or a gift was added. Nothing about the shopper. | 400 days, as daily totals |
| Rate limits | Counters keyed by a salted, daily-changing one-way hash of the visitor's IP address (never the address itself). | Up to 1 day |
Shopify includes the shopper's customer ID in app proxy requests when they're logged in; the app ignores it and never stores or logs it.
Customer privacy requests
- Access requests (
customers/data_request) and erasure requests (customers/redact): the app holds no information about individual customers, so there is nothing to return or delete. The requests are acknowledged. - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we permanently delete everything we hold for the store, including rules, settings and counts.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting and database) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Access is limited to Mint Labs staff who need it to provide support. We use no analytics or trackers. See our security policy.
Retention
Rules and settings are kept while the app is installed. Access tokens are deleted as soon as the app is uninstalled, and everything else when Shopify sends the store deletion request 48 hours later. Report counts are kept for 400 days; rate-limit counters for up to a day.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly; shoppers should contact the store, or email us and we'll help. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs: support@stickermint.com