Caretaker: Store Monitor — Privacy Policy
Effective date: November 13, 2026
This policy explains what data the Caretaker: Store Monitor Shopify app ("Caretaker", "we") collects, why, how long we keep it, and your rights. Caretaker is made by EagerApps (Hoang Nguyen, an individual developer based in Vietnam).
Caretaker is a read-only app. It reads your store's theme files and the public HTML of your storefront, and tells you what changed. It does not read orders, customers or products, and it adds nothing to your storefront.
1. Who is responsible
EagerApps is the controller for the data listed below. Caretaker does not process your customers' personal data, so it does not act as a processor for you.
Contact: eagerapps22@gmail.com.
2. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Your store's myshopify domain, install and uninstall dates | Run the app for your store | Contract |
| The Shopify access token for your store (offline token and its refresh token), encrypted at rest | Read your theme files through Shopify's Admin API (read_themes permission only) |
Contract |
| Scan results: theme names and ids, file names and line numbers, app embed names, script addresses found in the theme or on the storefront, and what changed between scans | Show you findings and the change timeline | Contract |
| The public HTML of your storefront home page, read at scan time; we keep only the script addresses and app markers found in it, not the page | Find scripts left behind by removed apps | Contract |
| An email address for alerts, only if you turn alerts on, encrypted at rest, with the date you agreed | Send you an email when a theme publish or a weekly scan finds a problem | Consent |
| Server logs (request path and status, with tokens and signatures removed) | Security and fixing errors | Legitimate interest |
To prefill the alert form, Caretaker may read your store's contact email from Shopify. It is saved only if you turn alerts on.
We do not collect your customers' personal data. Caretaker requests no access to customers or orders. The
customers/data_request and customers/redact requests from Shopify are answered with "no data held".
We do not sell personal information, do not use it for advertising, and do not use your data to train AI models.
When a scan checks whether a script found in your theme still loads, our server requests that script's address. The site hosting the script sees a request from our server, not from your store or your customers.
3. Sub-processors
| Who | What for | Where |
|---|---|---|
| Shopify | The platform the app runs on (Admin API, webhooks) | As described in Shopify's privacy policy |
| Hetzner Online GmbH | Hosting for the app server and its database (our own server) | Helsinki, Finland (EU) |
| Resend, Inc. | Sending alert emails, only if you turn them on (your alert email address and the email content) | Japan (Tokyo) |
Links in the app and in alert emails go to eagerapps.com (guides, this policy, support). Opening those links is an ordinary visit to that website: Caretaker sends it no data about your store.
4. Security
- Access tokens and the alert email address are encrypted in the database with AES-256-GCM.
- Every Shopify webhook is checked against its HMAC signature before it is processed.
- Secrets live only in the host's protected environment and are kept out of logs.
5. How long we keep data
| Data | Kept | Deleted when |
|---|---|---|
| Access token (session) | While Caretaker is installed | At once when you uninstall |
| Scan results and change timeline | While Caretaker is installed | When you press Settings → Delete scan data, or when Shopify sends shop/redact (about 48 hours after you uninstall) |
| Alert email address | While Caretaker is installed. Switching alerts off keeps the address so you can switch them on again | Delete scan data, or shop/redact |
| Finished background jobs | 30 days | Automatically |
| Store domain and install dates | Until shop/redact |
shop/redact deletes every row for your store |
6. Your rights
GDPR (EU/UK): access, rectification, erasure, restriction, portability, objection, and the right to complain to a supervisory authority. CCPA/CPRA (California): the right to know, delete and correct, and not to be discriminated against for using these rights. We do not sell or share personal information as the CPRA defines those terms.
To use a right, write to eagerapps22@gmail.com. We answer within 30 days.
7. International transfers
Caretaker's data is stored in the European Union, on our server in Helsinki, Finland. If you turn alerts on, your email address is also passed to our email provider, Resend, which sends them from Japan. The European Commission recognises Japan as providing an adequate level of protection; Resend, Inc. is a US company, and any access from the US relies on appropriate safeguards such as the EU Standard Contractual Clauses.
8. Children
Caretaker is a tool for store owners and is not directed to children.
9. Changes
We will post changes here with a new effective date. If a change affects how we use data you already gave us, we will tell you in the app.