Privacy policy
Last updated September 29, 2026
Mint Tracking is a Shopify app made by Mint Labs ("we", "us"). It adds an order tracking page to a merchant's Shopify store and gives the merchant a dashboard of their shipments. This policy explains what the app handles about merchants and about the merchant's customers, why, and when it's deleted. For customer data we act as a service provider (processor) to the merchant, who is the controller.
The short version
- The tracking page reads an order from Shopify at the moment a shopper asks for it and shows it to them. That order information isn't stored.
- To check that the shopper owns the order, we compare the email address they type with the order's email address in Shopify. Neither is stored or logged.
- For the merchant's dashboard we keep a copy of each shipment's status, dates and carrier name, keyed by Shopify IDs and the order number, for 75 days. We never store customers' names, email addresses, phone numbers, addresses or tracking numbers.
- We never sell or share data, use it for advertising, or combine it across stores. The app sets no cookies and never emails shoppers.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To read orders and shipments from Shopify and receive shipment updates. |
| Store name and time zone | To show dates on the tracking page in the store's time zone and to name the store in the alert email. |
| Settings: texts, date language, delay threshold, colour, corner style, announcement, recommendations on/off | To run the tracking page and dashboard the way the merchant set them up. |
| The email address the merchant enters for delay alerts (Pro) | To send the weekly delay alert. Only used for that. |
| Plan and subscription status | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
| Monthly counts of tracking page lookups and failed attempts; when the tracking page, app embed and form block were last seen | To apply the Free plan's monthly limit and show the setup checklist. |
Information about the merchant's customers
| Information | How it's used | Kept |
|---|---|---|
| Order number and email address typed on the tracking page | Compared with the order's number and email address in Shopify to confirm the shopper owns the order. Wrong combinations get the same answer as unknown orders. | Not stored or logged |
| The order shown on the tracking page: items, shipment status, carrier, tracking numbers and links, estimated delivery and tracking updates (including the town or city of each carrier scan) | Read live from Shopify and shown to the shopper who proved they own the order. | Not stored |
| Signed-in customers: the Shopify customer ID in Shopify's signed request | To show a signed-in customer their own orders without asking for their email. | Not stored |
| Failed attempts: the order number that was typed and a keyed one-way hash of the visitor's IP address (never the address itself) | To slow down anyone guessing order numbers or email addresses. | 1 hour |
| Successful lookups: the order ID and the date | So the same order viewed again the same day counts once towards the Free plan's monthly limit. | 3 days |
| Shipment copies for the dashboard: Shopify fulfillment and order IDs, order number, status, carrier name, shipping, transit, delivery and estimated delivery dates, date of the latest tracking update | To count shipments, find delayed ones and list them for the merchant with a link to the order. | 75 days after shipping |
| Shipment notifications from Shopify (which include personal details such as the delivery address) | Only the shipment ID is read; the shipment is then read back from Shopify as above. Nothing else is stored or logged. | Not stored |
| “You may also like” products (Pro) | The shopper's browser asks the store itself for related products. Nothing is sent to us. | — |
Customer privacy requests
- Access requests (Shopify's
customers/data_request): the app home shows the request and the merchant downloads what we hold about the listed orders as a file to send to the customer. - Erasure requests (
customers/redact): we permanently delete the shipment copies and lookup records for the listed orders. - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we permanently delete everything we hold for the store.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting, database and the merchant alert email) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Access is limited to Mint Labs staff who need it to provide support. We use no other sub-processors, analytics or trackers. See our security policy.
Retention
Shipment copies are deleted 75 days after shipping, lookup records after 3 days and failed-attempt records after 1 hour. Access tokens are deleted as soon as the app is uninstalled, and everything else when Shopify sends the store deletion request 48 hours later. Settings are kept while the app is installed.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly; customers should contact the store they ordered from, or email us and we'll pass the request on. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs — support@stickermint.com