Milestone Cart Privacy Policy

Last updated: October 31, 2026

Milestone Cart (“the App”) provides a cart milestone popup and revenue-lift analytics (“the Service”) to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

Personal Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Shopify account through Shopify’s APIs:

• Shop information: your shop domain (e.g., yourstore.myshopify.com).
• Discounts (read): active discounts and promotions, used to determine which milestone offers can be shown.
• Orders (write order metafields): used to save a summary of revenue lift and the promotion that drove it onto a completed order.
• Billing: the active pricing plan, managed through Shopify’s Billing API.

Additionally, we collect the following types of information from you and/or your customers once you have installed the App:

Information about you and others who access the App on behalf of your store:

• Shopify access tokens, obtained through Shopify’s standard OAuth installation process and used solely to make authorized API calls on your behalf.
• App settings you configure, currently limited to whether the milestone popup is enabled or disabled.
• Subscription status (which pricing plan is active). We never receive, process, or store payment card numbers or other financial account details; Shopify handles all billing directly.

Information about individuals who visit your store:

• Cart contents (item quantities, product/variant IDs, and subtotal), read transiently when a shopper views their cart or begins checkout, to determine whether they qualify for a milestone offer. This data is not permanently stored by the App.
• If a shopper chooses to add more items to reach a milestone, the App writes non-identifying cart attributes to that shopper’s cart: the cart subtotal at that moment, the shop domain, and the title(s) of the promotion(s) being pursued. If the cart becomes a completed order, this information is used to calculate and store a revenue-lift summary on that order’s metadata, visible to you in your Shopify Admin and in the App’s dashboard.
• Technical information such as IP address, browser type, and date/time stamps, which may be recorded in standard server logs by our hosting providers when the App’s servers receive requests.

We do not collect, store, or have access to: customer names, email addresses, phone numbers, or physical addresses; payment card numbers or other financial account information; order line-item purchase history tied to an identifiable customer; or any data usable to identify a specific customer across visits or across stores.

We collect information directly from the relevant individual, through your Shopify account, or using the following technologies:

• Local storage: the App’s storefront script writes a small amount of diagnostic state to the shopper’s browser local storage to help troubleshoot issues. This is not a cookie and is not transmitted to us; it never leaves the shopper’s browser.
• Log files: track actions occurring on the App’s servers and may include IP address, browser type, referring/exit pages, and date/time stamps.

The App does not use cookies, web beacons, tags, or pixels for tracking or advertising.

How Do We Use Your Personal Information?

We use the information we collect from you and your customers in order to provide the Service and to operate the App. Additionally, we use this information to:

• Determine whether to display a milestone-progress popup to a shopper;
• Calculate and report revenue-lift analytics to the merchant who installed the App;
• Operate subscription billing through Shopify’s Billing API;
• Communicate with you and respond to support requests; and
• Optimize and improve the App.

We do not use personal information for behavioural or targeted advertising, and we do not provide you with advertising relating to third-party products.

Sharing Your Personal Information

We do not sell, rent, or share personal information with third parties for advertising or marketing purposes. We share information only with the service providers needed to operate the App:

• Neon (neon.tech): hosts the Postgres database that stores merchant access tokens and app settings.
• Render (render.com): provides application hosting.
• Shopify: order-level analytics (revenue lift and associated promotion) are stored as order metafields inside your own Shopify store, governed by Shopify’s data protections and readable only by you and the App.

Finally, we may also share your information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

Behavioural Advertising

The App does not use your information to provide targeted advertisements or marketing communications, and does not use remarketing technologies.

Your Rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Residents of other jurisdictions, including certain U.S. states, may have similar rights to access, correct, or delete their personal information. Because Milestone Cart does not collect customer-identifiable personal information, most customer requests will have no applicable data to act on. We acknowledge and respond to all requests, including those forwarded through Shopify’s mandatory privacy webhooks (customer data request, customer data erasure, and shop data erasure). Merchants may contact us at any time regarding their own account data.

If you are a European resident, we note that we process your information in order to fulfill our contract with you (for example, to provide the Service to merchants) and to pursue our legitimate business interests listed above. Please also note that your information will be transferred outside of Europe, including to the United States, where our service providers operate.

Data Retention

• Merchant data: we keep access tokens and app settings for as long as the App is installed. If you uninstall the App, they are deleted from our database within 48 hours, in compliance with Shopify’s data protection requirements.
• Cart data: read transiently and not stored by the App.
• Order metafields: order metafields written by the App remain part of your own Shopify order records and are subject to your own data retention practices within Shopify.
• Customer erasure requests: because the App does not store customer-identifiable data, there is no customer-specific data to delete.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. Material changes will be reflected by updating the “Last updated” date above.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at milestone-cart@faustarts.com or by mail using the details below: