Privacy policy
Last updated 10 August 2026.
Clearmark shows a public document published by the European Commission. It does not collect, store or process any information about your customers, sets no cookies, and runs no analytics or tracking of any kind on your storefront.
What we store
| Data | Why | Kept for |
|---|---|---|
Your shop's myshopify.com domain and a Shopify access token |
Required to authenticate the app with Shopify and read your theme and language settings | Until you uninstall. Deleted when Shopify sends the shop redaction request, 48 hours after uninstall |
| Your app settings (chosen placement, wording, GARAN durations) | To render the notice the way you configured it | Placement and wording live in your own theme. GARAN durations live in your product metafields, in your Shopify store, not ours |
What we never collect
- Names, email addresses, or any other customer personal data.
- Order, payment or cart contents.
- Behavioural or analytics data about your shoppers. We set no cookies and load no trackers.
What happens when a shopper opens the notice
The notice image is served from cdn.clearmarkapp.com, hosted on Cloudflare Pages.
Like any web request, this involves the shopper's IP address and browser user agent reaching
Cloudflare, which processes them as our infrastructure provider to deliver the file and protect
against abuse. We do not use these to identify or profile anyone, we do not combine them with
anything else, and we do not sell or share them. See
Cloudflare's privacy policy.
The notice also contains a QR code and a link to the European Commission's Your Europe website. If a shopper follows it, they are on a site we do not control.
Sub-processors
| Provider | Purpose |
|---|---|
| Shopify | The platform the app runs on, and the source of the shop data listed above |
| Cloudflare | Serving the notice files and the app's website |
GDPR requests
Clearmark is a processor acting on the merchant's instructions. Because we hold no customer
personal data, a customer data request or erasure request forwarded to us returns nothing: there
is nothing to export and nothing to delete. We handle Shopify's mandatory
customers/data_request, customers/redact and shop/redact
webhooks, and shop/redact deletes the shop record described above.
Contact
Questions, or a request about your data: [email protected]. We answer within two business days.