Privacy Policy

1. Introduction

Custom Diamond Ring Builder (the “App”) is a Shopify app published by Cracktab (“we,” “our,” or “us”). It adds a diamond selector to ring product pages and prices each ring from a rate sheet the merchant uploads. This policy describes the data the App handles for merchants who install it and for shoppers who use the selector on a merchant's storefront.

2. What the App can access in your store

When you install the App, Shopify asks you to approve these permissions:

Permission	Why the App needs it
Read and write products	To read your ring products and their prices, and to create the unlisted made-to-order product that carries the price of each configured ring.
Read and write publications	To make those made-to-order products available on your Online Store so they can be checked out.
Read orders	To receive new-order notifications for the App's sales analytics.
Read files	To let you pick ring photos from your store's files.
Write metaobjects and metaobject definitions	To store App configuration inside your Shopify store.

3. What the App stores

3.1 Store and configuration data

Your store's myshopify.com domain and the Shopify session and access token for the App.
Your diamond price data: shape, origin, carat, colour, clarity and price for each row.
Your ring product settings: Shopify product ID, title, metal, shape, base price and whether the selector is enabled.
The image address you assign to each carat weight.
Your selector and appearance settings.
A record of the made-to-order products the App has created: product ID, variant ID, the stone combination and its total price.

3.2 Order data for analytics

When an order is placed in your store, Shopify notifies the App. From that notification the App keeps:

The order ID and order name (for example “#1001”), whether the order contained a ring configured with the App, and the ring revenue.
Daily totals for your store: number of orders, gross sales, discounts, tax, shipping and net sales.
Daily ring totals by shape, origin, carat, colour and clarity.

3.3 Customer data

The App does not store personal information about your customers. It does not keep names, email addresses, phone numbers or postal addresses. The storefront selector does not ask who the shopper is: it sends the chosen stone specification and the product, and receives a price.

4. How the data is used

To show shoppers only the stone combinations you have priced, and to calculate the ring total.
To add the configured ring to the cart at the correct price, with the specification on the line item.
To show you sales analytics inside the App.
To keep the App working, diagnose errors and provide support.

We do not sell your data and we do not use it for advertising.

The App runs on these services, which process data on our behalf:

Shopify — the platform the App is installed on. Billing for the App is handled by Shopify.
Supabase — the database that holds the data listed in section 3.
Vercel — hosting for the App.

We may also disclose information where the law requires it.

6. Retention and deletion

While the App is installed, the data in section 3 is kept so the App can work.
When you uninstall the App, its Shopify session for your store is deleted.
Shopify sends a shop erasure request 48 hours after uninstall. When the App receives it, it deletes everything it holds for your store: price data, ring settings, carat images, selector settings, made-to-order product records, sessions and analytics.

To have your data deleted sooner, or to ask for a copy of it, email privacy@cracktab.com from the store owner's address and include your myshopify.com domain.

7. Your rights

Depending on where you are, you may have the right to access, correct, export or delete the data we hold about your store, and to object to or restrict its processing. Contact us at the address below to make a request.

Shoppers who want to exercise rights over their order data should contact the merchant they bought from. The App answers Shopify's customer data and customer erasure requests; because it stores no customer personal information, there is nothing for it to return or erase.

8. Security

Requests between your store and the App are authenticated by Shopify, and storefront requests reach the App through Shopify's app proxy, which verifies the store on each call. Ring prices are calculated on the server from your price data, so a shopper's browser cannot set a price. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy when the App changes. The “Last updated” date at the top shows the latest revision.

10. Contact

Email: privacy@cracktab.com
Website: cracktab.com

Need a hand?

Send us your store URL and what you are trying to do, and we will help you get set up.