1. Introduction
GhostSweep ("we", "our", "the App") is a Shopify application that scans your store's theme files to detect leftover code from uninstalled apps (ghost code) and identifies orphan Metafield definitions. This Privacy Policy explains how we collect, use, and protect information when you use our application.
2. Information We Collect
GhostSweep collects and processes the following types of information:
2.1 Store Information (via Shopify API, read-only)
- Store domain and URL
- Theme file contents (snippets, sections, assets, layout files) — read-only access for scanning, not permanently stored
- Installed app list — read-only access for cross-referencing with theme code
- Metafield definitions (Shop and Product level) — read-only access for orphan detection
2.2 Scan Data (stored in our database)
- Scan reports: theme name, scan date, ghost file count, total size
- Ghost file records: filename, file type, risk level, match type, matched line numbers, code preview snippet
- Metafield scan reports: orphan Metafield namespace, key, owner type, associated app name
- Shopify session tokens (for authentication)
2.3 What We Do NOT Collect
- Customer personal data (names, emails, addresses, payment info)
- Order or transaction data
- Product content or pricing data
- Analytics or tracking data
- Cookies or browser fingerprints (language preference uses localStorage only)
3. How We Use Information
We use the collected information solely to:
- Scan theme files and cross-reference against installed apps to detect ghost code
- Generate scan reports with risk-level classification and line-level code pinpointing
- Scan Metafield definitions and identify orphan definitions from uninstalled apps
- Delete orphan Metafield definitions upon your explicit confirmation
- Provide report export (PDF/JSON) — generated entirely in your browser, no data sent to our servers
- Maintain scan history for your reference
- Authenticate your Shopify admin session
4. Data Storage and Security
Your scan data is stored in a PostgreSQL database hosted on a secure cloud platform. Session tokens are encrypted and stored securely. All communication between the App and Shopify uses HTTPS encryption.
Theme file contents are read temporarily during scanning and are not permanently stored in our database. Only metadata (filenames, sizes, matched line numbers, code preview snippets) is retained in scan reports.
PDF and JSON report exports are generated entirely in your browser using client-side libraries. No report data is transmitted to our servers during export.
5. Data Sharing
We do not sell, rent, or share your data with third parties. Your data is only transmitted to:
- Shopify — via the Shopify Admin API (theme file reads, app list queries, Metafield operations)
6. Data Retention and Deletion
- Uninstall: When you uninstall GhostSweep, all data associated with your store (sessions, scan reports, ghost file records, Metafield reports) is automatically and permanently deleted from our database.
- Shop Redaction: When Shopify sends a shop data redaction request, we delete all data for that store within 48 hours.
7. GDPR Compliance
GhostSweep is designed to comply with GDPR requirements:
- We do not store any customer personal data
- We respond to Customer Data Request webhooks (confirming no customer data is held)
- We respond to Customer Data Deletion webhooks (confirming no customer data to delete)
- We respond to Shop Data Deletion webhooks (deleting all store data)
8. Your Rights
You have the right to:
- Access your data — visible within the App's scan history and report pages
- Export your data — download scan reports as PDF or JSON
- Delete your data — delete individual reports or uninstall the App to remove all stored data
9. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated through the App or via the Shopify App listing. Continued use of the App constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at:
Email: support@mayscience.com