Privacy Policy
Last updated: 2026-10-07
1. Controller
Stern & Schatz GmbHBarkauer Str. 121
24145 Kiel
Deutschland
kontakt@go-spindle.de
2. What Shop-Check is
Shop-Check is an app for the Shopify admin. It checks the product data of a store (SKUs, barcodes, weights, inventory tracking) and helps fix the problems it finds. The app processes data solely to run these checks and assistants for the store in question. It does not use the data for advertising, does not sell it and does not share it with third parties other than the hosting provider (section 6).
3. What the app reads from Shopify
The app reads through the Shopify Admin API, using the permissions you grant during installation and inside the app:
| Data | Purpose | When |
|---|---|---|
| Products and variants: title, options, SKU, barcode, weight, inventory tracking and quantity, preview images, app-owned metafields | Checks and suggestions | Each time you start a check run, and in the product page card |
| Store name | Shown on the overview | When the overview opens |
| Number of orders in the last 60 days | Size of the store | Only if you grant read access to orders inside the app |
| Orders of the last 60 days: order date, time of shipment, status (test, cancelled, requires shipping) | Fulfillment time | Only with read access to orders, when the shipping page opens |
| App installation metafield: the time a notice in the app was dismissed | Not showing the notice again | When the overview opens |
| App installation metafield: the chosen SKU template | Suggestions for new SKUs | When the SKU page opens |
The app does not read the names, addresses, email addresses, payment details or line items of your customers. From orders it processes only the timestamps and statuses listed above.
4. What the app writes to Shopify
The app changes data only when you click “Übernehmen” (apply) or “Gewicht setzen” (set weight) inside the app. It then writes, on the selected variants: SKU, barcode, weight and inventory tracking, plus app-owned metafields (the source of a weight, the confirmation of an unusual weight). On the app installation it stores the time you dismissed a notice and the SKU template you chose. The product page card writes nothing.
5. What the app stores
- On the server: one session per store holding the store domain, the access token for the Shopify API, the granted permissions and the expiry time. Without this session the app cannot talk to your store.
- Temporarily in server memory: the catalog snapshot of a check run (variants with the fields from section 3). It is discarded after about five minutes.
- In your browser: the results of the last check run for 30 minutes in the session storage of the tab (sessionStorage). They disappear when you close the tab.
- Server logs: timestamp, store domain and technical error messages, no customer data. Logs are deleted after 30 days at the latest.
Check results are not stored on the server. The app itself sets no cookies and embeds no analytics or advertising services. Inside the Shopify admin, the privacy policy of Shopify applies.
6. Hosting
The app runs on servers of Hetzner Online GmbH in Falkenstein (Germany). The hosting provider processes data on our behalf under a data processing agreement. Transfers between your browser, Shopify and the app are encrypted (TLS).
7. Deletion
- When you uninstall the app, it deletes the session of your store immediately (webhook
app/uninstalled). Shopify removes the app-owned metafields. - 48 hours after uninstallation Shopify sends the
shop/redactwebhook. The app then deletes any remaining data of the store. - The app responds to the
customers/data_requestandcustomers/redactwebhooks but has nothing to provide or delete, because it stores no customer data.
8. Legal basis
The app processes the data of your store to perform the contract on using the app (Art. 6(1)(b) GDPR). Where that data contains personal data for which you are the controller, the app processes it on your behalf. A data processing agreement is available from the address in section 1.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection under Art. 15 to 21 GDPR, and the right to lodge a complaint with a data protection authority. Contact the address in section 1.
10. Changes
If what the app reads, writes or stores changes, this policy is updated. The date above shows the current version.