OrderGate by Gezici Labs
Privacy Policy
Last updated 9 August 2026
OrderGate is a Shopify app, published by Gezici Labs, that lets a merchant block unwanted buyers at checkout before an order is created. This page describes exactly what data the app touches, what it keeps, and for how long.
The short version: OrderGate stores no buyer personal data on its servers. Buyer details are evaluated inside Shopify and never transmitted to us. What we keep is a store credential and anonymous daily counts.
Who is responsible for what
The merchant running the store is the data controller. Gezici Labs acts as a data processor on the merchant’s behalf and only processes what is described below. If you are a shopper and want to know what a particular store holds about you, contact that store directly — we cannot identify you from anything we hold.
Buyer data the app is granted access to
- Email address and shipping address at checkout. Shopify passes these to our checkout validation function, which runs inside Shopify’s own sandboxed runtime. That code has no network access: it compares the values against the merchant’s rules and returns either nothing or a rejection message. The values are never sent to us and never written down.
- Orders from the last 24 hours. While a merchant is in log-only mode, the app scans recent orders at most once a day to report how many would have been blocked. It reads only the email address and the shipping country, city, and postal code, holds them in memory for the length of that calculation, and stores only the resulting totals. No order, customer, or address is retained.
- Checkout events. The app installs a web pixel that reports three event names — checkout started, payment info submitted, checkout completed — together with a random token that identifies the store, never the shopper. It sets no cookies, reads no browser storage, and sends no identifiers, cart contents, or personal data.
The app never receives IP addresses, payment details, or browsing history, and it has no access to a shopper’s activity outside of the checkout events listed above.
What we store, and where
- Your Shopify session. Your store domain, the access token that lets the app call Shopify on your behalf, the permissions you granted, and their expiry. The access token is a credential and is treated as one.
- An opaque pixel token. A random string used to match incoming checkout events to your store.
- Daily counters. Per store and per day: how many checkouts started, reached payment, and completed, plus how many orders the rules would have blocked and a breakdown by rule type. These are plain numbers and cannot be traced to a person.
This data is held on Cloudflare Workers and Cloudflare D1, encrypted in transit and at rest.
Where your blocking rules live
The rules you write — email addresses, domains, countries, postal prefixes, customer tags — are stored in your own Shopify store, as metafields under the app’s reserved namespace. They are not copied to our servers. If a rule contains a specific buyer’s email address, that address is data you entered and it stays inside your store. Uninstalling the app removes those metafields along with it.
How long we keep things
- Your session is deleted as soon as we receive Shopify’s app uninstall notification.
- Everything else we hold for your store — the pixel token and every daily counter — is deleted when Shopify sends the shop redaction request, 48 hours after uninstall.
- Because we hold no per-shopper records, Shopify’s customer data request and customer redaction webhooks have nothing to export or erase. We acknowledge both.
Who else sees this data
Two processors, both required to run the app: Shopify, which hosts your store and delivers the app, and Cloudflare, which hosts our code and database. There is no analytics provider, no advertising network, and no third-party tracking of any kind. We do not sell or share data, and we do not use it to train models.
Your rights
Merchants can ask us at any time what we hold for their store, request a copy, or ask for deletion — uninstalling triggers deletion automatically, but you do not have to uninstall to ask. Under GDPR and similar laws you also have rights of access, correction, restriction, and objection. Email support@ordergate.app and we will respond within 30 days.
Changes
If this policy changes in a way that affects what we collect or how we use it, we will update the date at the top of this page and notify installed merchants by email before the change takes effect.