Privacy policy
Last updated October 1, 2026
Mint Shipping Rules is a Shopify app made by Mint Labs ("we", "us"). It lets a merchant hide, rename and reorder the delivery options and payment methods shown at checkout, and offer their own shipping rate tables. This policy explains what the app handles, why, and when it's deleted.
The short version
- We store the merchant's rules, rate tables and app settings. We don't store anything about the merchant's customers: no names, emails, phone numbers, addresses, orders or carts.
- Delivery and payment rules run as Shopify Functions inside Shopify's checkout. They read the cart, the delivery address's country, province and postcode, and whether a signed-in customer has the tags the rules name — and can't send anything anywhere; nothing reaches our servers.
- Rate tables (if the merchant turns them on) are answered by our server: Shopify sends the delivery address and the items for each rate request. We use them in memory to pick and price rates, and never store or log them.
- We never sell or share data, use it for advertising, or combine it across stores. No cookies, no tracking on the storefront.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To create and update the store's delivery and payment customizations and its carrier service, and to read shipping rate names, product tags and (in the simulator) the products the merchant picks. |
| Rules and rate tables: countries, provinces, postcodes, amounts, weights, product and customer tags typed by the merchant, option names, store currency, time zone and weight unit | To run the rules and rates the way the merchant set them up. |
| IDs of products that carry a tag used by a rate table | So rate requests can be answered without asking Shopify (only product IDs and which of those tags they have). |
| Plan and subscription status | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
| Rate service health: when the last rate request was answered, how long it took, how many rates were returned, its currency and whether Shopify's signature was valid | To show the merchant that rate tables are working. |
Information about the merchant's customers
| Information | How it's used | Kept |
|---|---|---|
| At checkout: cart items (quantities, weights, product tags), cart subtotal and currency, the delivery address's country, province and postcode, whether the buyer is signed in or a B2B buyer, whether a signed-in customer has the tags the rules name, the chosen delivery option | Read by the app's Shopify Functions inside Shopify's checkout to decide which options to show. Functions can't send data anywhere; nothing reaches us. | Not stored |
| Rate requests (rate tables only): the delivery address Shopify sends (street, city, province, postcode, country), the items (name, SKU, quantity, weight, price, product and variant IDs, vendor), the currency, cart totals and, when the customer is signed in, their customer ID and tags | Used in memory to choose and price the rates (country, province, postcode, weights, quantities, prices, product IDs, cart totals and customer tags), then discarded. Never written to our database or logs. | Not stored |
Because the app holds no customer data, Shopify's customer privacy requests (customers/data_request, customers/redact) have nothing to return or delete; we acknowledge them. When a store is deleted (shop/redact, sent 48 hours after a merchant uninstalls) we permanently delete everything we hold for the store.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting, database and key-value storage) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Access is limited to Mint Labs staff who need it to provide support. We use no other sub-processors, analytics or trackers. See our security policy.
Retention
Rules, rate tables and settings are kept while the app is installed and deleted 48 hours after uninstall (so a quick reinstall doesn't lose them). Access tokens and the rate service's configuration are deleted as soon as the app is uninstalled. Rate request contents are never kept.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly and can delete their rules and rate tables in the app at any time. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs — support@stickermint.com