Privacy notice
Draft. Have a lawyer review this before launch and replace the bracketed fields.
Controller: [FILL: legal entity name, registered address]. Contact: privacy@shopbouncer.com.
What we collect on this site
- The store address you scan and the scan result, which is public information about that website.
- A one-way hash of your IP address, salted and rotated daily, used only to limit scans per visitor. We do not store your IP address.
- Your email address, only if you choose to unlock the full report, together with the time you gave consent, a hashed record of who submitted it (to stop people submitting other people's addresses), and whether we've sent the report and follow-up.
- Founding license reservations on /pro: your email, the plan you picked, the store address if you give it, the time you consented, and the same daily-rotated IP hash to limit submissions. We use them only to email you about your reservation and the founding offer.
Purchases happen on Freemius's checkout page, not on this site. Freemius is the merchant of record: it collects your payment and billing details under its own privacy policy. From Freemius we receive only sale notifications with license and plan numbers, which power the live count on /pro; we don't store buyers' names or emails from them.
We count page views per day, by page and by where the visit came from (the linking site's name, like google.com, or a campaign tag in the link). No cookies, no IP addresses, nothing that identifies you.
Cloudflare Turnstile checks that you're human. It runs without tracking cookies. See Cloudflare's privacy policy for details.
Why, and on what basis
Scan data: our legitimate interest in running a free, abuse-resistant tool. Email: your consent. When you unlock a report we email it to you once, then send one follow-up a few days later, and occasionally our research on AI agents in ecommerce. Every email has a one-click unsubscribe link; you can also reply "unsubscribe" or write to the contact above. After you unsubscribe we keep only your address on a do-not-email list so we never email you again.
How long we keep it
Scans nobody unlocked are deleted after 180 days. Unlocked scans, email addresses and reservations are kept until you ask us to delete them. If you unsubscribe, we keep only your email address on a do-not-email list.
Who processes it
Cloudflare, Inc. (hosting, database, human verification) and Resend (email delivery). We do not sell or rent personal data.
Your rights
You can ask for access, correction, deletion or a copy of your data, and you can complain to your data protection authority.