Privacy policy
Last updated September 29, 2026
Mint Wishlist is a Shopify app made by Mint Labs ("we", "us"). It lets shoppers save products to a wishlist on a merchant's Shopify store. This policy explains what the app handles — about merchants and about shoppers who use a wishlist — why, and how it's deleted. For shopper data we act as a service provider (processor) to the merchant, who is the controller.
The short version
- Guests' wishlists are stored in their own browser, not on our servers.
- For signed-in customers on stores using our Pro plan, we store the Shopify customer ID with the IDs of the products they saved, so their list follows them to any device. We never receive or store names, email addresses, phone numbers or addresses.
- The merchant's report uses anonymous totals: how many times each product was saved or removed per day.
- We never sell or share data, use it for advertising, or combine it across stores. The storefront script sets no cookies.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To read product titles, images and handles (the app's only data permission is read access to products) and to publish the button style to the storefront. |
| Button style settings | To show the wishlist button the way the merchant chose. |
| Plan and subscription status | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
| Daily totals of saves and removals per product, and a monthly save count | For the most-wishlisted report and the Free plan's monthly limit. These are counts only, not linked to any shopper. |
Information about shoppers
| Information | How it's used | Stored by us? |
|---|---|---|
| A guest's wishlist (product and variant IDs, product web address) | Kept in the browser's local storage on the shopper's device so the hearts and wishlist page show what they saved. | No — only on the shopper's device |
| Each save or removal (product and variant ID) | Sent to our server through the store's own domain to apply the plan limit and add one to the product's anonymous daily total. | Only as anonymous daily totals per product |
| Shopify customer ID of a signed-in customer (Pro stores only) | Shopify adds it to each request from a signed-in customer and signs the request, so we know whose list to load or change. We store it with the product and variant IDs they saved and the time they saved them. When they sign in, items saved as a guest on that device are added to it. | Yes — customer ID and product/variant IDs only |
| Share links | When a shopper shares their wishlist we create a random link. For a signed-in customer it shows their current list; for a guest it stores a copy of the product IDs they shared. Anyone with the link can view the list; it never shows who shared it. | Yes — random token plus the customer ID (signed-in) or product IDs (guest) |
| IP address (forwarded by Shopify) | Turned into a keyed one-way hash to limit rapid repeated saves from one connection (abuse protection). | Only the hash, for at most about an hour |
Retention
- Guest wishlists stay in the shopper's browser until they remove items or clear their browser data. When a customer signs out, the copy of their account list kept in that browser is removed.
- Signed-in customers' saved items are kept until they remove them, the merchant's customer asks for erasure, or the merchant uninstalls.
- Guest share links expire after 180 days. A signed-in customer's share link lasts until they create a new one or their data is erased.
- Rate-limit hashes are deleted hourly once their window has passed.
- Anonymous daily totals and settings are kept while the app is installed. Access tokens are deleted when the app is uninstalled.
Customer privacy requests
- Access requests (Shopify's
customers/data_request): we look up the product IDs saved to that customer ID and whether they have a share link, and provide them to the merchant on request. - Erasure requests (
customers/redact): we delete that customer's saved items and share links. - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we permanently delete everything held for the store — saved items, share links, settings, totals, usage counts, rate-limit records and access tokens.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting and database) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Every storefront request is checked against Shopify's signature before we act on it. Access is limited to Mint Labs staff who need it to provide support. We use no other sub-processors, analytics or trackers.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly; shoppers should contact the store, or email us and we'll pass the request on. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs — support@stickermint.com