Data & privacy
What Cartie stores, what it never touches, and how it handles GDPR requests from your customers.
#What Cartie stores
- Your cart designs, templates, experiments and settings.
- Anonymous storefront events — widget impressions, cart views, add-to-carts and checkout clicks — tied to a short-lived session identifier, not to a named person.
- Order totals and ids from Shopify's order webhook, used to attribute revenue to widgets and experiments.
#What Cartie does not do
- It does not touch your checkout, payment details or customer payment methods.
- It does not build shopper profiles across stores, or sell or share your data.
- It does not modify your theme's code — it renders through Shopify's app-embed mechanism, which you control and can switch off at any time.
#Permissions Cartie asks for
| Permission | Why |
|---|---|
| Read products | Show real products, prices and images in upsells, volume discounts and subscriptions. |
| Read orders | Attribute revenue to widgets and experiments, and work out your order-volume band. |
| Read & write discounts | Create the automatic discounts that back flash sales, rewards ladders and volume tiers — and check that codes you reference really exist. |
| Write products | Create the shipping-protection fee product when you ask for one. |
| Read & write publications | Publish that fee product to your Online Store so it can be added to a cart. |
| Read & write files | Store images, video and audio you upload for banners and notes. |
| Read themes | Detect whether the Cartie app embed is enabled in your live theme. |
#GDPR and customer data requests
Cartie implements Shopify's mandatory privacy webhooks. When a customer asks you for their data or asks to be erased, and when a store is redacted after uninstall, Shopify notifies Cartie and the corresponding records are handled automatically. You do not need to email us to action a request that came through Shopify.
#Cookies and consent
Cartie's storefront runtime uses a first-party session identifier so a shopper sees a consistent A/B variant during their visit. It sets no third-party advertising cookies. Cartie's own marketing site has a cookie settings control in its footer.
The full legal detail is in the Privacy Policy and Terms of Service.
Still stuck on this?Send us your store domain and what you’re seeing — we’ll take a look.