Privacy policy
Ironbark Checkout Rules · Last updated 20 September 2026
The short version
Ironbark Checkout Rules does not collect, receive or store any personal information about your customers. It stores the rules you configure and the credentials needed to talk to your store, and nothing else.
What the app stores
- Your store’s domain and an access token. Issued by Shopify when you install the app, used to read and write your checkout rules. Deleted when you uninstall.
- The rules you create: postcode ranges, state and territory codes, shipping rate names, payment method names, order total thresholds, and the titles you give them. These are held in an app metafield on your shop, which is Shopify’s infrastructure, not ours.
What the app does not store
The rules are enforced by Shopify Functions, which run inside Shopify’s own checkout rather than on our servers. At checkout a Function is given the delivery address’s country, state or territory, and postcode, the available shipping rates and payment methods, and the cart total, so it can decide what to show.
That data never leaves Shopify. We do not receive it, log it, transmit it or keep it. Nothing about it is retained once the rate list has been filtered. The app does not request access to customer names, email addresses, phone numbers, street addresses, orders or payment details, and it holds no Protected Customer Data approval because it needs none.
Privacy requests
The app answers Shopify’s mandatory privacy webhooks. Because it holds no customer personal data, a customer data request returns nothing and a customer redaction request has nothing to erase. A shop redaction request deletes your store’s stored credentials.
If you uninstall the app, your credentials are deleted. Rules you created remain in your own shop’s metafields, under your control, and stop being applied because the Functions are uninstalled with the app.
Third parties
The app sends no data to any third party. There is no analytics, no tracking, no advertising and no external API beyond Shopify’s own.
Contact
Questions about this policy, or about what the app does with anything: ziondiorsm@gmail.com.