Privacy Policy

App: CloverKit - Daily Crossword  |  Developer: CloverKit Studio  |  Last updated: April 2026

This Privacy Policy describes how CloverKit Studio ("we", "us", or "our") collects, uses, and handles information when you install and use the CloverKit - Daily Crossword app ("the App") available on the Shopify App Store.

1. Information We Collect

Merchant account data

When you install the App through Shopify's OAuth flow, we receive and store the following information about your Shopify account:

• Shop domain (e.g. yourstore.myshopify.com)
• Account owner first name, last name, and email address
• Store locale and region
• OAuth access token (used to make authorised API calls to your store)
• Granted API scopes

Subscription and billing data

If you subscribe to the Analytics plan ($1.99/month), we store the following in connection with your shop:

• Your chosen plan (Free Forever or Analytics)
• Shopify subscription ID
• Subscription status (e.g. ACTIVE, CANCELLED)
• Free trial end date (where applicable)
• Marketing contact email (if you opted in to product updates)

All billing and payment processing is handled entirely by Shopify via the Shopify Billing API. We never receive or store credit card or payment details.

Storefront engagement analytics

When visitors to your store interact with the CloverKit - Daily Crossword puzzle block, the following events are recorded for analytics purposes:

• crossword_puzzle_started — shop domain, puzzle difficulty, your plan tier
• crossword_puzzle_completed — shop domain, puzzle difficulty, time elapsed (seconds), your plan tier

No customer personal information (name, email address, customer ID, IP address, or any other identifier) is collected or transmitted as part of these events. Analytics are aggregated at the shop level only.

2. How We Use Your Information

We use the information collected to:

• Authenticate your Shopify store and maintain your session
• Manage your subscription and enforce plan-based feature access
• Display engagement analytics on your Analytics dashboard (puzzle starts, completions, and completion times) — available on the Analytics plan ($1.99/month)
• Send product updates and tips to merchants who have opted in to marketing communications
• Improve the App and diagnose technical issues

3. Third-Party Services

PostHog (Analytics)

We use PostHog (posthog.com) to collect and process the storefront engagement events described above. PostHog acts as a data sub-processor on our behalf. Events sent to PostHog contain only shop-level metadata — no customer personal data is included. PostHog's privacy policy is available at posthog.com/privacy.

Shopify

The App is distributed through and operates within the Shopify platform. Shopify's privacy policy governs the data Shopify collects independently of this App. See shopify.com/legal/privacy.

4. Data Retention

Merchant account data and subscription records are retained for as long as the App is installed on your store. When you uninstall the App:

• Your session data is deleted immediately upon receipt of the app/uninstalled webhook.
• All remaining shop data (subscription records, plan information) is permanently deleted within 48 hours in response to Shopify's shop/redact compliance webhook.
• PostHog analytics events are retained according to PostHog's standard data retention policy.

5. GDPR and Privacy Rights

We comply with the EU General Data Protection Regulation (GDPR) and applicable privacy laws. As a merchant using this App, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data

To exercise any of these rights, please contact us at the email address below. Shopify also handles data subject requests on behalf of merchants through its mandatory compliance webhook system, which this App fully supports.

Customer data: This App does not collect, store, or process personal data belonging to your customers (store visitors). Customer interactions with the crossword puzzle are tracked only at an aggregate, anonymous level.

6. Data Security

All data is transmitted over HTTPS/TLS. OAuth access tokens are stored securely in a PostgreSQL database with access limited to the App's backend server. We do not share your data with third parties other than the sub-processors listed in Section 3.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the App after any changes constitutes acceptance of the updated policy.

8. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

CloverKit Studio
Email: [email protected]
Website: cloverkitstudio.com