ExtStore Checkout Rules is a Shopify app run by ExtStore. It lets a merchant add rules that block checkout when a cart doesn’t meet them. This page says what the app stores, what it reads, and how data is removed.
What the app stores
The app’s own database holds two kinds of record, both keyed by the store’s myshopify.com domain:
- Shopify sessions. The store domain, the access token Shopify issues when the app is installed, the granted scopes and their expiry. For a staff member signed in to the app, Shopify also includes their name, email address, locale and account flags; the app uses them only to keep that session.
- App state for the store. Whether the setup guide was finished or dismissed, and, after a plan downgrade, the names of the rules the app turned off so it can tell the merchant.
The rules themselves are stored in the merchant’s Shopify store, on Shopify’s cart and checkout validation records, not in the app’s database.
What checkout reads when a rule runs
Each rule runs as a Shopify Function inside Shopify checkout. Shopify gives the function the data a rule may check, and the function returns only “allow” or “block, with this message”. Nothing it reads is sent to the app’s servers or stored by the app. Depending on the rules a merchant sets up, the function can read:
- cart subtotal and total, line quantities and costs, product ID, handle and type, variant ID and SKU;
- one cart attribute and one product metafield, when a rule names them;
- the buyer’s email address, the customer’s number of orders, and whether the customer has the tags a rule checks;
- the delivery country and ZIP or postal code;
- the checkout language and market.
Email and delivery address are protected customer data under Shopify’s terms. The app requests them only so merchants can write rules on them, and only the function inside Shopify ever sees them.
What the app does not do
- It doesn’t store orders, carts, customers or addresses.
- It doesn’t sell or share data, use it for advertising, or add tracking scripts to your storefront.
- This website sets no cookies and uses no analytics.
Service providers
The app runs on a server operated by ExtStore on Oracle Cloud Infrastructure, which also holds the database backups. If error reporting is enabled, error details are sent to Sentry with access tokens, session tokens and customer data removed.
Retention and deletion
| When | What happens |
|---|---|
| You uninstall the app | Shopify sends app/uninstalled; the app deletes the store’s sessions. Shopify removes the store’s validation records, and with them the rules. |
| 48 hours later | Shopify sends shop/redact; the app deletes anything left for that store. |
| A customer asks for their data | Shopify sends customers/data_request. The app holds no customer data, so there is nothing to return. |
| A customer asks to be erased | Shopify sends customers/redact. The app holds no customer data, so there is nothing to erase. |
| Backups | Nightly database backups are kept for 14 days, then deleted. |
Your rights
You can ask what the app holds about your store, or ask for it to be deleted, at any time. Customers of a store should contact the store; the store can reach us on their behalf.
Contact
Email support@extstore.com.