Privacy Policy

Last updated: October 1, 2026

Shelfmark is a Shopify app that helps a merchant put more than one barcode on a variant, and find a product by any of its codes. It works on the product catalogue and nothing else. This policy explains what it reads, what it writes, what it stores, and what it never sees.

What the app reads

When a merchant checks a file or searches for a code, the app queries the Shopify Admin API for catalogue data only:

• Product and variant identifiers, titles and option names
• SKUs and barcodes
• Whether a product is active, draft or archived

What the app never reads

The app does not request and cannot see orders, customers, names, email addresses, shipping addresses, payments, or any other personal information. It holds no protected customer data permission from Shopify, so the platform itself would refuse such a request even if the code made one. Its access is limited to reading and writing products.

What the app writes

Barcodes, onto the products the merchant chose, and only after the merchant has seen the full list of changes and pressed the button. It never edits prices, inventory or titles, and it never removes a barcode that is already there.

The file you upload

A barcode file is read in the request that carries it, compared with the catalogue, and discarded when that request ends. It is not written to disk, not kept in a database, and not sent anywhere other than back to the merchant’s own screen as the list of what would happen.

What the app stores

One thing: the Shopify session for the store — the store’s .myshopify.com domain and the access token Shopify issues at install, which is what lets the app talk to that store at all. It is held in a Cloudflare D1 database on an encrypted volume. No product, SKU or barcode is copied into it. The database is a single table and its schema is public in the app’s source.

Deletion

When a merchant uninstalls the app, Shopify sends an app/uninstalled webhook and the app deletes that store’s session immediately. Nothing else of theirs exists to delete.

Shopify’s mandatory customers/data_request, customers/redact and shop/redact webhooks are implemented. The first two can only ever be answered one way: this app holds no customer data, so there is none to hand over and none to erase. shop/redact deletes the session if one is somehow still present.

Third parties

There are none. The app runs on Cloudflare Workers, which processes requests on our behalf; it uses no analytics, no advertising, no tracking and no artificial-intelligence service. Nothing is sold or shared, because there is nothing to sell or share.

If something goes wrong

If the session store were ever reached by someone who should not have it, affected merchants would be told within 72 hours of the app learning of it, the tokens involved would be revoked with Shopify, and the app would be taken offline in preference to leaving it running.

Contact

Questions, or a request about data, to hjuhyun35@gmail.com.

Changes

If what the app reads, writes or stores changes, this page changes in the same release and the date at the top moves with it.