sK Shipping Calculator – Privacy Policy

Last updated: 8 September 2026

This policy explains what sK sK Shipping Calculator (“the app”) does with data. It is short because the app collects very little.

What the app stores

When you install the app, we store two things:

• Your store’s domain (for example your-store.myshopify.com) and the access token Shopify issues so the app can talk to your store.
• Your plan status – whether your store is on the free or Pro plan, and whether your store has already used its free trial.

That is the complete list.

What the app does not access

sK sK Shipping Calculator requests no access scopes. It cannot read or write:

• Products, collections or inventory
• Orders, carts or checkouts
• Customers or any customer personal data
• Discounts, price rules or payouts
• Files, themes or any other store resource

You can confirm this on the installation screen: Shopify lists the permissions an app requests before you install it, and this app requests none.

What happens on your storefront

The calculator is rendered by your theme as ordinary HTML, and its settings live in your theme’s own settings. Visitors to your store never contact our servers.

When a shopper asks for an estimate, two requests are made in their browser, both to your own store’s domain, never to ours:

• Your store’s /cart/shipping_rates.json endpoint, with the country, state/province and postal code the shopper typed, so your store can calculate its own rates.
• Your store’s /cart.js endpoint, to read the cart currency so prices are formatted correctly.

The address a shopper types is used for that request and nothing else. It is not sent to us, and we never see it. If the merchant turns on “remember the shopper’s destination”, the last country, state and postal code are kept in that shopper’s own browser (localStorage) so they do not have to type them again. That value never leaves their device and the shopper can clear it by clearing their browser data.

Shopify’s mandatory privacy webhooks

Shopify requires every public app to respond to three privacy requests. Here is how this app handles them:

Request	Our response
customers/data_request – a shopper asks for their data	Nothing to provide. We hold no customer data.
customers/redact – a shopper asks to be deleted	Nothing to delete. We hold no customer data.
shop/redact – a store is deleted, 48 hours after uninstall	We delete your store’s domain, access token and plan record.

Where data is stored

Store domain and plan status are held in a Postgres database hosted in the European Union (Frankfurt region). Data is transmitted over TLS.

How long data is kept

Your access token is deleted immediately when you uninstall the app. Your store record is deleted when Shopify sends the shop/redact request, which happens 48 hours after uninstall.

Sub-processors

Provider	Purpose	Location
Shopify	App platform, billing	Global
Neon	Postgres database	EU (Frankfurt)
Vercel	Application hosting	EU

No other party receives any data.

Changes to this policy

If this policy changes in a way that affects what we store, we will update the date at the top and notify merchants through the app.