Privacy notice

Draft. Have a lawyer review this before launch and replace the bracketed fields.

Controller: [FILL: legal entity name, registered address]. Contact: privacy@shopbouncer.com.

What we collect on this site

• The store address you scan and the scan result, which is public information about that website.
• A one-way hash of your IP address, salted and rotated daily, used only to limit scans per visitor. We do not store your IP address.
• Your email address, only if you choose to unlock the full report, together with the time you gave consent, a hashed record of who submitted it (to stop people submitting other people's addresses), and whether we've sent the report and follow-up.

Cloudflare Turnstile checks that you're human. It runs without tracking cookies. See Cloudflare's privacy policy for details.

Why, and on what basis

Scan data: our legitimate interest in running a free, abuse-resistant tool. Email: your consent. When you unlock a report we email it to you once, then send one follow-up a few days later, and occasionally our research on AI agents in ecommerce. Every email has a one-click unsubscribe link; you can also reply "unsubscribe" or write to the contact above. After you unsubscribe we keep only your address on a do-not-email list so we never email you again.

How long we keep it

Scans nobody unlocked are deleted after 180 days. Unlocked scans and email addresses are kept until you ask us to delete them. If you unsubscribe, we keep only your email address on a do-not-email list.

Who processes it

Cloudflare, Inc. (hosting, database, human verification) and Resend (email delivery). We do not sell or rent personal data.

Your rights

You can ask for access, correction, deletion or a copy of your data, and you can complain to your data protection authority.