Privacy policy

Privacy policy

Shipping Status Timeline helps merchants offer a branded order tracking experience. This page explains what data the app processes, why it processes it, and how that information is handled.

Shipping Status TimelineLast updated April 18, 2026

What this app does

Shipping Status Timeline is a Shopify app that lets merchants create a customizable order progress timeline and publish a guest-facing Track Order page. Customers enter their order number and email address to view a minimal order progress result.

Information the app processes

  • Merchant store information needed to install and operate the app, including the shop domain and Shopify app sessions.
  • Merchant-configured timeline and appearance settings saved for the store.
  • Customer-submitted order number and email address when a customer uses the Track Order page.
  • Limited Shopify order data needed to verify that the submitted order identifier and email match before showing tracking progress.

How customer lookup works

The Track Order page performs server-side verification only. The app checks the submitted order identifier and email against Shopify data and returns only a minimal timeline response. The public response is intentionally limited and does not expose raw order objects, shipping addresses, or unnecessary customer details.

How data is stored

  • Shopify sessions and access tokens are stored in the app database using Prisma session storage.
  • Merchant timeline and appearance settings are stored as hidden app-data metafields in Shopify.
  • The app is designed to log only limited operational metadata and to avoid logging raw customer payloads or customer email addresses in normal operation.

Compliance requests

The app subscribes to Shopify's mandatory privacy and compliance webhook topics:

  • `customers/data_request`
  • `customers/redact`
  • `shop/redact`

These requests are received at the app's compliance webhook endpoint and acknowledged after HMAC verification.

Sharing and subprocessors

The app relies on Shopify to access store and order data and on its hosting/database providers to run the service. If you submit this app to the Shopify App Store, replace this section with your final legal company name and the subprocessors you actually use in production.

Manual customization recommended: replace this section with your legal entity name, support contact, subprocessors, and any retention details required by your privacy counsel or App Store review materials.

Contact

Privacy questions can be sent to support@example.com.

Replace this placeholder address with your real support or privacy contact before submission.