This policy covers the Quantity Limit Manager website and Shopify app (the “Service”). “We” refers to the developer operating the Service. For privacy questions or requests, contact deboer@gmail.com.
Information the Service handles
- Store and session information. To connect to Shopify, the app stores authentication records, including the store domain, access token, granted permissions, and session identifiers or expiry information. Depending on the Shopify session, these records can include a staff user’s ID, name, email address, language, and account-role information.
- Product information. The app reads product identifiers, titles, product types, and saved quantity limits to display and update limits. Limits are saved in the store’s Shopify product metafields.
- Checkout validation information. The validation function processes cart quantities, product and variant identifiers, product titles and limits, and Shopify’s indication of whether a customer has a B2B or b2b tag. This allows it to combine quantities and apply the exemption. The validation query does not request payment-card details, shipping addresses, customer email addresses, or purchase history.
- Support correspondence. If you email us, we receive your email address and the information you include. Please do not send passwords, access tokens, payment details, or unnecessary customer information.
- Technical records. Hosting and application logs may contain request information such as IP addresses, requested URLs, timestamps, errors, and store domains. These records support troubleshooting and service security.
How information is used
Information is used to authenticate authorized store users, retrieve and save product limits, validate checkout quantities, provide requested support, troubleshoot problems, and protect the Service. The current app does not maintain customer purchase histories or use checkout data to build advertising profiles.
Shopify and service providers
The Service exchanges information with Shopify to provide its features. Hosting providers process technical information necessary to run the website and app. Support email is handled through Gmail. Those services also handle information under their own terms and privacy policies. Information may also be disclosed where required by applicable law or to address misuse or security incidents.
Merchants control their stores and remain responsible for their own customer-facing privacy notices. Shopify’s handling of information is explained in the Shopify Privacy Policy.
Cookies and the website demo
Shopify authentication may use cookies or similar session mechanisms. The website’s interactive demo keeps the selected limit and quantity in browser memory; using it does not update a store or submit an order. Ordinary website requests can still appear in technical logs. The current website does not include an advertising or third-party analytics integration.
Retention and uninstalling
Authentication records support the installed app’s operation. On an authenticated uninstall notification, the app removes stored sessions for that store, even if the offline session is already missing. The shop-redaction handler also removes the store’s sessions. Customer data-request and redaction handlers do not retain their payloads; the app has no stored shopper or order records to export or erase. Product-limit metafields remain in Shopify. Support emails and operational logs are handled separately and may require manual review. Application logs are configured for daily rotation with seven rotated files retained; web-server logs are configured for daily rotation with fourteen rotated files retained. Rotation depends on the server’s scheduled jobs. Contact us to request deletion or discuss retained information.
Your questions and requests
Email deboer@gmail.com to request access, correction, or deletion of information associated with you or your store. We may need to verify your authority before acting. Available rights and any exceptions depend on applicable law. If you are a shopper, contact the merchant first about information held in their store; we can assist with requests relating to this Service.
Security and processing location
Access tokens allow access to the store and must be kept confidential. The public website uses HTTPS, but no system can guarantee absolute security. Shopify, hosting, and email services may process information outside your location. Contact us if you need additional details about processing arrangements before connecting a store.
Changes and contact
We will update this page and its effective date when this policy changes. Contact deboer@gmail.com with questions. See also our terms of use.