Privacy policy
Last updated October 1, 2026
Mint Cookie Consent is a Shopify app made by Mint Labs ("we", "us"). It shows a cookie consent banner on a merchant's online store and saves each shopper's choice with Shopify's Customer Privacy API. This policy explains what the app handles, why, and when it's deleted.
The short version
- We store the merchant's settings. We read no customer data from Shopify: no names, emails, addresses, orders or customer IDs.
- Shoppers' cookie choices are saved by Shopify (through its Customer Privacy API), not by us. On the Free plan the storefront script never contacts our servers.
- Only if a merchant on the Pro plan turns on the consent log do we store a record of each choice: a random consent ID created in the shopper's browser, region, choices, banner version, language and time. Never an IP address, name, email or browser details. Deleted after 12 months.
- We never sell or share data, use it for advertising, or combine it across stores.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To save the banner settings where the theme app embed reads them, read whether Shopify's own cookie banner is on (and turn it off when the merchant clicks the button for it), read and write the store's consent regions in Shopify's privacy settings, and read the live theme's settings file to show whether the app embed is turned on. |
| Settings: layout, colours, regions and US states, which features are on, the merchant's own banner texts, privacy policy link, banner version | To show the banner the way the merchant set it up. |
| The consent regions the app wrote to Shopify | So a region the merchant removes can be switched back off, without touching regions the merchant set in Shopify themselves. |
| Plan and subscription status | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
| Whether the last update to Shopify succeeded | To show problems on the app home and retry. |
Information about the merchant's shoppers
| Information | How it's used | Where / how long |
|---|---|---|
| The shopper's cookie choice | Saved with Shopify's Customer Privacy API (Shopify stores it in its _tracking_consent cookie, as it does for Shopify's own banner). The app reads the shopper's region and earlier choice from the same API to decide whether to show the banner. | Shopify, under Shopify's policies |
Local storage mint_consent (store's domain) | The banner version the shopper answered, whether the US privacy notice was closed, and — only with the Pro consent log — the random consent ID, so the same ID is used for later changes and the shopper can see it in Preferences. | Shopper's browser, until they clear it |
| Consent log entries (Pro, only when the merchant turns the log on) | Proof of consent for the merchant: random consent ID (128 bits, created in the shopper's browser, not linked to any account), region code from Shopify (for example FR or USCA), the choices as Shopify saved them, whether the browser sent Global Privacy Control, banner version, storefront language and time. Sent through Shopify's signed app proxy. | Our database, 12 months, then deleted automatically |
| IP address (Pro consent log requests only) | Used for a moment, inside a keyed hash, to rate-limit abuse of the log endpoint. Never stored, logged or put in the consent log. | Not stored |
Because consent log entries aren't linked to a name, email or customer account, Shopify's customer privacy requests (customers/data_request, customers/redact) can't be matched to them; we acknowledge those requests. A shopper who wants their entries can give the merchant the consent ID shown in Preferences; merchants can find it in the log and contact us to delete it. When a store is deleted (shop/redact, sent 48 hours after a merchant uninstalls) we permanently delete everything we hold for the store, including its consent log.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting and database) and connects to Shopify's APIs. The storefront script is served by Shopify. Data is encrypted in transit (TLS) and at rest. Access is limited to Mint Labs staff who need it to provide support. We use no other sub-processors, analytics or trackers. See our security policy.
Retention
- Consent log entries: 12 months from the choice, then deleted by a daily job.
- Settings and consent log: deleted 48 hours after uninstall (so a quick reinstall doesn't lose them).
- Access tokens: deleted as soon as the app is uninstalled.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly and change their settings in the app at any time. Shoppers can change their choice on the store at any time and clear local storage in their browser. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs — support@stickermint.com