Privacy policy
Last updated September 29, 2026
Mint Loyalty is a Shopify app made by Mint Labs ("we", "us"). It runs a loyalty program for a merchant's Shopify store: customers earn points on paid orders and redeem them for discount codes. This policy explains what the app handles about merchants and about the merchant's customers, why, and when it's deleted. For customer data we act as a service provider (processor) to the merchant, who is the controller and decides who takes part in their program.
The short version
- We identify customers only by their Shopify customer ID. We don't store customers' names, email addresses, phone numbers or addresses.
- Names and email addresses are shown to the merchant in the app's admin by fetching them from Shopify at that moment; they aren't saved.
- We store each member's points history, the IDs and amounts of their paid orders, and the discount codes they redeemed.
- We never sell or share data, use it for advertising, or combine it across stores. The app sends no emails and sets no cookies.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To receive order, refund and customer notifications, create discount codes and save balances to customer records. |
| Program settings (earn rate, bonus, rewards, VIP tiers, referrals, expiry, launcher text and colours) and the store currency | To run the program the way the merchant set it up. |
| Plan and subscription status | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
| When the storefront launcher or block last loaded | To show the merchant that the launcher is switched on (setup checklist). |
Information about the merchant's customers
| Information | How it's used | Kept |
|---|---|---|
| Shopify customer ID and membership (date joined, balance, lifetime points earned and redeemed, VIP tier, referral link code) | To run the member's account in the program. | While the app is installed, until the customer's data is erased |
| Points history: each change with the amount, the reason (order number, refund, reward code, bonus, referral, expiry) and any note the merchant typed for a manual adjustment | To keep balances exact and show members and the merchant how a balance came about. | Same |
| Paid orders and refunds: order ID and number, customer ID, product subtotal after discounts, amount refunded, points earned and reversed | To award points once per order, take them back on refunds, and work out VIP tiers from 12-month spend. | Same |
| Reward codes: the code, reward, points spent, status and the order that used it | So each code works once, for that customer only, and so the merchant can see which orders used rewards. | Same |
| Referrals: the friend's single-use code, the referring member's ID and, once the friend orders, the friend's customer ID and order ID | To reward the member once per new customer and prevent abuse (self-referral, repeat friends). | Same |
| Names and email addresses | Shown to the merchant in the app's member list and member pages, fetched live from Shopify. | Not stored |
| Order and customer notifications from Shopify (which include personal details such as email and address) | Only the IDs, amounts and discount codes are read. Nothing else is stored or logged. | Not stored |
| Rate-limit keys: a customer ID, or a keyed one-way hash of the visitor's IP address for referral links | To stop repeated redemption or referral-code requests. | 25 hours |
| Balance and VIP tier on the customer record in Shopify (app metafields) | So the merchant sees points on the customer page and can show them in the theme. | In the merchant's store, under their control |
| Browser storage on the shopper's device | The launcher saves today's date in local storage so it reports "the launcher is live" to us at most once a day. No cookies, no tracking. | On the device |
Customer privacy requests
- Access requests (Shopify's
customers/data_request): the app home shows the request and the merchant downloads everything we hold about that customer as a file to send them. - Erasure requests (
customers/redact): we permanently delete the customer's membership, points history, orders, refunds, reward codes and referrals. - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we permanently delete everything we hold for the store.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting and database) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Access is limited to Mint Labs staff who need it to provide support. We use no other sub-processors, analytics or trackers. See our security policy.
Retention
Program data is kept while the app is installed so balances stay correct, and is deleted when the store is deleted after uninstall (48 hours) or, for one customer, when the merchant or Shopify asks us to erase it. Access tokens are deleted as soon as the app is uninstalled. Rate-limit keys are deleted after 25 hours.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly; customers should contact the store whose program they belong to, or email us and we'll pass the request on. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs — support@stickermint.com