Privacy Policy
Script Inserter lets Shopify merchants add JavaScript, CSS, and Liquid snippets to their online store without editing theme code. This policy explains what information the app collects when you install and use it, why, and what happens to it. It is written to be read, not skimmed past — but here is the short version.
The short version
- We store your store's basic details, the scripts you create, and your subscription status — nothing about your customers.
- We never sell or rent your information, and we don't share it with anyone except the services that run the app.
- Uninstalling the app deletes your data automatically.
What we collect
When you install Script Inserter, Shopify shares basic information about your store with the app. We store:
- Store details: your store's myshopify domain, store name, owner name, contact email, timezone, primary language, and country.
- Your scripts: the name, code, placement, and page-targeting settings of every snippet you create in the app. These are yours; we store them to publish them to your storefront and to let you edit them later.
- Subscription status: whether your store has an active subscription, so we know which features to provide. Billing itself is handled entirely by Shopify — we never see payment details.
- API access credentials: the access token Shopify issues so the app can act on your store. Tokens are short-lived, rotated automatically, never shared, and revoked the moment you uninstall.
We do not collect, store, or process any information about your customers. Script Inserter has no access to orders, customer profiles, or checkout data. The scripts you add may themselves collect data (for example, an analytics tag) — that collection is governed by your own privacy practices and the provider of that script, not by this policy.
Shopify permissions the app requests
| Permission | Why the app needs it |
|---|---|
| Read themes | To check whether the Script Inserter app embed is enabled in your theme, so the app can tell you when your scripts aren't loading. The app never modifies your theme files. |
| Read and write script tags | Legacy support for stores that installed before 2024, whose scripts were delivered through Shopify's older ScriptTag system. Used only to remove those legacy entries during migration. |
Your scripts are delivered to your storefront through a Shopify theme app extension and app-owned metafields — the mechanism Shopify recommends, which never edits your theme's code.
How we use your information
- To publish your scripts to your storefront and keep them working across theme updates.
- To operate your account: verifying your subscription, showing the right setup steps, and detecting when a theme change has switched the app embed off.
- To email you about your account — a welcome message on install, a notice if we detect your scripts have stopped loading, and a brief message if you uninstall. We don't send marketing email.
- To diagnose errors and keep the service reliable.
Who we share it with
We don't sell, rent, or trade your information, and we don't share it with advertisers or data brokers. The only third parties that touch your data are the services we use to run the app, each bound to process it solely on our behalf:
| Service | Purpose | Location |
|---|---|---|
| Heroku (Salesforce) | Application hosting and database | United States |
| Amazon Web Services | Hosting of legacy script files for pre-2024 installs | United States |
| Rollbar and AppSignal | Error monitoring and performance diagnostics (may include your store domain in error reports) | United States |
| Email delivery provider | Sending the account emails described above | United States |
We may also disclose information when required by law — to comply with a subpoena, court order, or other lawful request — or to protect our rights and the safety of our merchants.
Retention and deletion
We keep your information only while the app is installed. When you uninstall Script Inserter, Shopify notifies us and we delete your store record, your scripts, and any legacy hosted script files automatically. Shopify's own data-erasure requests (customer and shop redaction) are honored through Shopify's mandatory compliance webhooks; because we hold no customer data, a customer redaction request has nothing to erase, and a shop redaction request removes any remaining trace of your store.
Error-monitoring services retain diagnostic logs for a limited period according to their own retention settings.
Your rights
You can view and edit your scripts at any time inside the app, and delete all of your data by uninstalling it. Depending on where you live, you may also have the right to access, correct, export, or delete the personal information we hold about you, or to object to how it's processed — including under the GDPR if you're in the European Economic Area or the United Kingdom, and under the CCPA if you're a California resident. To exercise any of these rights, email us using the contact details below; we'll respond within 30 days.
Because our infrastructure is hosted in the United States, your information is transferred to and processed there. We rely on our providers' standard contractual safeguards for those transfers.
Changes to this policy
We may update this policy to reflect changes in the app or in the law. When we do, we'll change the date at the top of this page; for significant changes we'll also notify you by email at the address on your store.
Contact
Script Inserter is built and operated by YouOrderit in Barranquilla, Colombia. For questions, requests, or complaints about privacy, email elias@youorder.it.