Privacy Policy

Consently · Last updated: July 13, 2026

This Privacy Policy explains how Dropfeed LLC ("Dropfeed," "we," "us") collects, uses, and protects information when you install and use Consently (the "App") on your Shopify store. Consently is a cookie-consent tool that helps you collect and honor your visitors' consent. By installing the App, you agree to this policy.

1. Information we access

When you install Consently, we access the following through the Shopify Admin API and related APIs, only as needed to provide the App:

Store & account details: your store name and domain, and the store owner/primary contact email (for support and billing notices).
Your banner configuration: the settings you choose for the consent banner (layout, colors, copy, categories, and behavior).
Anonymized consent records: when one of your visitors makes a choice, the App records an anonymous proof-of-consent entry — a randomly generated visitor identifier, a coarse region (e.g. EU / US), the choice made (accept, reject, or per-category), and a timestamp. These records contain no names, email addresses, IP addresses, or other personal identifiers.
Detected tracker domains (scanner): the hostnames of third-party trackers loading on your storefront, categorized (e.g. analytics / marketing) so you can see and manage them. These are technical domain names — not personal data about your visitors.
App usage & billing status: basic logs and your subscription plan/status (managed through Shopify).

Consently is a privacy tool, and we hold ourselves to the same standard. We do not collect your visitors' personal data. Consent records are anonymized — we do not store your customers' names, emails, IP addresses, phone numbers, addresses, or payment details.

2. How we use information

To display your cookie-consent banner and record anonymized proof of each visitor's choice.
To signal consent to Google Consent Mode v2 and Shopify's Customer Privacy API, so tracking runs only after a visitor consents.
To show you aggregate consent statistics (banner views, accepts, rejects).
To operate, secure, support, and improve the App, and to administer billing.

3. Sub-processors

We rely on infrastructure sub-processors to run the service:

Fly.io — application hosting and database.
Shopify — platform, authentication, and billing.

Consently does not send your data to advertising or analytics networks. These sub-processors process data only to provide their services to us, under their own terms and security commitments.

4. Data sharing

We do not sell your data. We share information only with the sub-processors above to operate the App, or where required by law.

5. Data retention and deletion

We store your banner settings and anonymized consent records while the App is installed — not your visitors' personal information. When you uninstall the App or request deletion, we delete your associated data within 30 days, except where we must retain limited records for legal or accounting purposes.

We honor Shopify's mandatory compliance webhooks — customers/data_request, customers/redact, and shop/redact. Because the App does not store customer personal data, a customers/redact request has no personal data to remove; a shop/redact request triggers deletion of your store's data from our systems.

6. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS) and at rest, access controls, and least-privilege API scopes. No method of transmission or storage is 100% secure, but we work to protect your information.

7. Your rights (GDPR, CCPA, and similar)

Depending on your location, you may have rights to access, correct, export, or delete your data, and to object to or restrict certain processing. To exercise these, email support@dropfeed.io and we will respond as required by law. We do not sell personal information.

8. International transfers

Your data may be processed in the United States and other countries where we or our sub-processors operate. We take steps to ensure appropriate safeguards for such transfers.

9. Children

The App is for business use and is not directed to children. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date. Material changes will be communicated where appropriate.

11. Contact

Dropfeed LLC
Navarre, FL
Email: support@dropfeed.io

← Back to Dropfeed