Privacy Policy

Last updated: 9 July 2026

SortLock is operated by B4SED Ltd. This policy explains what data the app collects and how it is used.

What SortLock Does

SortLock pins selected products to fixed positions in a Shopify collection while the remaining products follow a Shopify-native Base Sort Rule.

Access Scope

SortLock requests the write_products Shopify scope only. This is used to read product and collection membership, change a locked collection to manual sort, reorder products in that collection, and restore the original sort order when you unlock.

Data We Collect

• Shop domain and Shopify access token
• Collection IDs, product IDs, Lock settings, Pin positions, and original collection sort order
• Conflict Snapshots containing Shopify product IDs in the captured order
• Activity log entries and timestamps
• Billing subscription status from Shopify app billing

Data We Do Not Collect

• Customer names, emails, phone numbers, addresses, or payment data
• Orders or order webhooks
• Theme files, storefront scripts, checkout data, or storefront visitor tracking

Recovery Snapshot

When SortLock is uninstalled, Shopify removes API access before the app can unlock collections. To support an explicit reinstall recovery flow, SortLock retains a minimal Recovery Snapshot for up to 30 days. It contains Lock configuration, collection IDs, product IDs, Pin positions, and original sort order. It is deleted earlier when Shopify sends shop/redact.

Retention

• Activity log: retained for 90 days while installed
• Recovery Snapshot: retained up to 30 days after uninstall unless shop/redact arrives earlier
• Webhook idempotency records: retained for 24 hours

Storage and Sharing

Data is stored on Cloudflare Workers and D1. We do not sell or rent data. Data is exchanged only with Shopify APIs and Cloudflare infrastructure required to run the app.

Your Choices

You can unlock collections before uninstalling to restore their original Shopify sort order. You can also request access or deletion by contacting support.

Contact

Email: [email protected]

B4SED Ltd, United Kingdom