Shopinator

Privacy Policy

Data controller

Christian Schwan Am Sportplatz 24 79112 Freiburg im Breisgau, Germany legal@schwan.io

shopinator.io

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy set out below.

Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When the site is accessed, technically necessary data (e.g. IP address, timestamp, page accessed, browser type) is processed in server log files to ensure secure, stable operation. The legal basis is Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. Vercel is certified under the EU-US Data Privacy Framework, so any transfer to the USA is based on the European Commission's adequacy decision (Art. 45 GDPR).

Cookies

This website sets a single, strictly necessary cookie (name: “locale”, lifetime: 12 months) that stores only your chosen language. Because it is essential for a service you explicitly request (language selection), no consent is required (§ 25(2) TDDDG); the subsequent processing relies on Art. 6(1)(f) GDPR. No analytics, tracking, or marketing cookies are used.

Last updated: 23 July 2026

Checkout Address Validator

Checkout Address Validator (“the app”), provided by Shopinator, a brand of Christian Schwan, helps merchants validate buyer shipping addresses during checkout. This policy explains what data the app processes.

Data the app processes

The app stores only the authentication session required to connect to your Shopify store (your shop domain and an access token). Validation rules you configure are stored on your store as an app-owned metafield, not on our servers.

During checkout, Shopify runs the validation logic in-platform and provides it with the buyer's delivery address so it can check for a missing postal code or house/building number. The app does not receive, store, or transmit that address to any external service.

Hosting and storage

The app is hosted on Vercel (Vercel Inc., United States). Its session data is stored in Amazon DynamoDB (Amazon Web Services) in the EU (Frankfurt, eu-central-1) region, so the session data does not leave the European Union. These providers process the data described above solely to operate the app, under data processing agreements; where a provider is based outside the EU, transfers rely on the EU Standard Contractual Clauses. The app does not sell any data or use it for advertising.

Data retention and deletion

When you uninstall the app, its session data is deleted. The app also honours Shopify's mandatory data request, customer redaction, and shop redaction webhooks.

Last updated: 13 July 2026

Delivery Promise

Delivery Promise (“the app”), provided by Shopinator, a brand of Christian Schwan, shows shoppers an estimated delivery date on the storefront, in checkout, and after purchase. This policy explains what data the app processes.

Data the app processes

The app stores only the authentication session required to connect to your Shopify store (your shop domain and an access token). Your delivery settings are stored on your store as app-owned metafields, not on our servers.

Delivery dates on your product and cart pages are calculated in the shopper's browser from those settings. No shopper data is sent to us for that calculation.

When an order is placed, the app calculates the delivery window that was promised and stores it on the order as a metafield, so the Thank you and Order status pages can show the same dates later. To do that it reads the order's creation time, its shipping country, and which variants were bought. No customer names, addresses, email addresses, or payment details are stored by us.

Hosting and storage

The app is hosted on Vercel (Vercel Inc., United States). Its session data is stored in Amazon DynamoDB (Amazon Web Services) in the EU (Frankfurt, eu-central-1) region, so the session data does not leave the European Union. These providers process the data described above solely to operate the app, under data processing agreements; where a provider is based outside the EU, transfers rely on the EU Standard Contractual Clauses. The app does not sell any data or use it for advertising.

Data retention and deletion

When you uninstall the app, its session data is deleted. Settings and order metafields remain on your store, under your control. The app also honours Shopify's mandatory data request, customer redaction, and shop redaction webhooks.

Last updated: 27 July 2026

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); the authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. To exercise your rights, an informal message to the contact details above is sufficient.

Right to object

Where I process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation, to that processing (Art. 21 GDPR). If you object, I will no longer process the data concerned unless I can demonstrate compelling legitimate grounds that override your interests.

Contact

For privacy questions, contact legal@schwan.io.