Privacy policy

Last updated: October 13, 2026.

This policy explains what the BulkAgeChecker Shopify app and the age.bulkcsv.com website collect, why, and how long it is kept. In this policy, "we" means the developer of BulkAgeChecker.

Information about merchants

When a store installs the app we keep:

• The store's myshopify.com domain and the access token Shopify issues to the app, so the app can work.
• The popup settings the merchant chooses (ages, rules by country, province and state, text, colors).
• Logo images the merchant uploads, which are served publicly so the popup can show them.
• Anonymous daily counts of how many popups were shown, confirmed and declined.

The app requests no Shopify access scopes, so it cannot read products, orders or customers. Plan and billing status are read from Shopify when needed and are not stored by us.

Information about store visitors

The popup does not collect names, email addresses, dates of birth or any other personal data. A date of birth typed into the popup is checked in the visitor's browser and is never sent to us. The counts above are totals per store per day and contain nothing that identifies a visitor.

The popup keeps these small entries in the visitor's own browser storage. They are not cookies and are never sent to us:

• agegate_ok_v1: that the visitor confirmed their age, until the number of days the merchant chose runs out (or until the tab is closed).
• agegate_denied_v1: that the visitor failed the date of birth check, until the tab is closed.
• agegate_cfg_v1: a copy of the popup settings, kept for 5 minutes to make pages load faster.
• agegate_region_v1: the visitor's province or state code, until the tab is closed.

If the merchant sets ages by province or state, the popup asks age.bulkcsv.com which province or state the visitor is in. Like any web request, this sends the visitor's IP address to our server through Cloudflare, which works out the location. We return only the country and region code, and we do not store or log the IP address or the result.

Our website

The public pages of age.bulkcsv.com (the home, support and privacy pages) use Google Analytics to count visits. Google Analytics sets cookies and receives information such as pages viewed, browser type and approximate location. It is not used inside the Shopify admin or on merchants' storefronts. You can opt out with your browser's cookie settings or the Google Analytics opt-out add-on.

Service providers

• Shopify, which runs the store, the app installation and billing.
• Cloudflare, which carries traffic to our server and provides the visitor location used for province and state rules.
• Google Analytics, on our public website only.

We do not sell or share data with anyone else, and we do not use it for advertising.

How long data is kept

When a store uninstalls the app, its access token is deleted straight away. Its settings, logos and daily counts are deleted when Shopify sends the shop redaction request, which Shopify sends 48 hours after uninstall. A merchant can ask us to delete their data sooner by contacting us.

Your rights

Depending on where you live, you may have the right to see, correct or delete data about you. Merchants can contact us directly. Store visitors should contact the store, since we hold no data that identifies them.

Contact

Questions about privacy: [email protected].