Privacy policy
Lit Delivery Customizations hides, renames and reorders delivery options at checkout for Shopify stores. This page says exactly what personal data it processes, why, where it lives and for how long.
Last updated 17 October 2026
The short version
Your customers' data stays inside Shopify. The rules run as a Shopify Function inside Shopify's own checkout, and that code sends us nothing. We store one row per shop with the details we need to email the store owner (welcome and uninstall emails). We sell nothing, run no ads, set no tracking cookies and share data only with the processors listed below.
Who is responsible
Lit Dog Labs, the maker of this app, is the controller for the merchant account data below. The app processes no shopper data outside Shopify's checkout.
What we process about merchants
| What | Why | Kept |
|---|---|---|
Shop details: .myshopify.com domain, contact email, the shop
owner's name, primary language, Shopify plan name, whether the shop is a development store,
whether it is on the paid plan |
To send the welcome email after install and one email after an uninstall, in your language, and to not email development stores. | Until 48 hours after uninstall (Shopify's shop/redact) |
| Your rules: conditions and delivery option changes, including product, collection and tag lists you pick | So the checkout can apply them. They are stored in your own Shopify store, as delivery customizations and their metafields, not on our servers. | In your store until you delete them; Shopify removes them when the app is uninstalled |
| Support emails you send to support@lit.dog | To answer you. | As long as needed for the conversation |
What we process about shoppers
Nothing is stored. When a shopper reaches the delivery step, Shopify runs the rule inside its own checkout and hands it only what the rule checks: the cart total, item weights, product ids, whether products are in the chosen collections or have the chosen tags, whether the logged-in customer has the chosen tags, the delivery country, province and postal code, and the delivery options on offer. The rule answers with "hide", "rename" or "move" for those options. Nothing is written anywhere, nothing leaves Shopify, and we never see it. The app does not read customers or orders through Shopify's Admin API.
Processors
- Cloudflare, Inc.: hosting (Workers), the one database table (D1) and email
sending (Cloudflare Email Service). Emails to merchants are sent from
hello@lit.dog. - Shopify: the platform the app runs on. Rules live in the merchant's own store.
There are no analytics vendors, advertising networks or third-party scripts in this app.
Permissions
The app asks only for what it uses: delivery customizations (to create and update the rules), products (to pick products and collections for conditions), shipping and locations (to suggest the names of your shipping rates and pickup locations when you write a rule).
GDPR requests
Because no shopper data is stored, a customers/data_request or customers/redact
from Shopify finds nothing to report or delete; we acknowledge it. On shop/redact we delete the
shop's row.
When a merchant uninstalls
Shopify removes the app's delivery customizations from the store, so checkout goes back to Shopify's
defaults at once. 48 hours later Shopify sends shop/redact and we delete the shop's row.
Security
All connections use TLS. Shopify webhooks are verified by their HMAC signature, admin requests by Shopify session tokens. Secrets live in Cloudflare's encrypted secret store, never in code. Access to the systems is limited to Lit Dog Labs' owner. If we suspect an incident we rotate credentials, roll back to the last good release, establish what was reached, and notify affected merchants and Shopify within 72 hours of becoming aware.
Contact
Questions, or a data request of any kind: support@lit.dog. We answer within two business days.