Privacy policy

In short: CB Right Click Blocker stores only your store domain and an access token. It collects no customer data, and the storefront script tracks no one.

Summary

We collect only what Shopify needs us to keep for the app to work: your store domain and an access token.
We do not request access to your products, orders, or customers.
Your settings are saved inside your own Shopify store, not on our servers.
The storefront script sets no cookies, does no tracking, and sends no data to us or anyone else.

Who we are

CB Right Click Blocker is a Shopify app built and operated by John De (“we”, “us”). This policy explains what information the app handles when a merchant installs it, and what happens on the merchant’s storefront. Questions can be sent to [email protected].

Information we collect

When you install the app, Shopify shares the following with us, and we store it:

Data	Why	Where it lives
Store domain (e.g. your-store.myshopify.com)	To know which store a request comes from	Our session database
Access token, its expiry, and granted scopes	To save your settings through Shopify’s API	Our session database
App settings (which protections are on, page rules, and messages you write)	To apply protection on your storefront	Your Shopify store, as a private app metafield

The app requests no access scopes, so it cannot read your products, orders, customers, or analytics. We do not collect payment details; the app is free.

Your storefront visitors

The protection runs entirely in your visitors’ browsers. The script is served from Shopify’s CDN and:

does not set cookies or use local storage;
does not track, profile, or fingerprint visitors;
makes no network requests to us or to any third party.

If you exempt logged-in or tagged customers, that check happens inside Shopify when the page is rendered. Customer information never reaches us.

How we use information

We use the store domain and access token only to authenticate you in the app admin and to save your settings. We do not sell, rent, or share this information, and we do not use it for advertising.

The app runs on Shopify’s platform and on a cloud hosting provider that stores our session database. These providers process data only to run the app, under their own security and privacy commitments. We do not use analytics or advertising services.

Retention and deletion

When you uninstall the app, we delete your session records.
Shopify removes the app’s metafield and theme embed from your store automatically.
We honor Shopify’s privacy webhooks (customer data requests, customer redaction, and shop redaction). Because we store no customer data, customer requests have nothing to return or delete.

Security

All traffic to the app is encrypted with HTTPS. Access tokens are stored only in our session database and are used only to call Shopify’s API on your behalf. Requests from Shopify, including webhooks, are verified before they are processed.

Your rights

Depending on where you live, laws such as the GDPR and the CCPA give you the right to access, correct, or delete your personal information, and to object to its processing. To exercise these rights, email [email protected]. Uninstalling the app also deletes the data we hold about your store.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change affects how your data is handled, we will tell you inside the app before it takes effect. See also our terms of service.

Contact

Questions about privacy: [email protected].