Privacy Policy — Amrita Cookie Consent
Effective Date: 2026-06-30 · Last Updated: 2026-07-16
App: Amrita GDPR Cookie Consent ("the App")
Provider: Amrita Labs ("we", "us"). For privacy questions, contact us at hello@amrita-labs.com.
Summary (plain language)
The App adds a cookie consent banner to your storefront that runs entirely in the visitor's browser. The visitor's consent choice is stored on their own device and recorded in Shopify's own consent system. The App does not collect personal data about your customers, does not set advertising or tracking cookies, and does not run its own analytics. The App requests no access to your store's data. The only information we store is a standard session record needed to run the embedded admin, which we delete when you uninstall.
1. Information we process
a. Merchant store session (to operate the app). When you install the App, Shopify provides an OAuth session. We store a session record — your shop domain, an access token, and granted scopes (currently none) — solely to authenticate and display the App's admin pages. We do not use it to read your products, customers, or orders.
b. Consent banner (visitor side). The banner runs in the visitor's browser. When a visitor makes a choice:
- Their selection is saved in their own browser using localStorage (a functional key so we know not to show the banner again) — this stays on the visitor's device, is never sent to or stored by us, and is not linked to any identity.
- The consent signal is passed to Shopify's Customer Privacy API, which records it in Shopify's own consent system and gates Shopify-managed pixels accordingly.
- If enabled, Google Consent Mode v2 signals (granted/denied) are sent to your Google tags. These signals carry the consent state only — we do not receive or store them.
c. What we do NOT collect. We do not collect, store, sell, rent, or share the personal data of you or your customers. We do not set advertising or tracking cookies and do not run our own analytics in the storefront banner. (The consent choice itself is functional, not tracking.)
d. If you contact us. If you email our support, we receive your email address and the contents of your message and use them only to respond to and resolve your inquiry. We don't store this in a database or use it for anything else.
2. How we use information
Only to provide and operate the App (authenticate the admin, render its pages, relay the visitor's consent choice to Shopify's Customer Privacy API and Google Consent Mode, and respond to Shopify's required webhooks). We do not use it for advertising or profiling.
3. Sharing & sub-processors
We do not sell or share personal data. The App runs on Shopify's platform and is operated using Microsoft Azure infrastructure with a managed database provider. These providers process data only to host the service.
4. Data retention & deletion
We retain the session record only while the App is installed. On uninstall we delete it, and we honor Shopify's privacy webhooks:
- shop/redact — we delete the shop's session record.
- customers/redact and customers/data_request — we hold no customer personal data, so there is nothing to return or delete.
Visitors can change or withdraw their choice at any time using the "Cookie preferences" reopen tab, or by clearing their browser storage.
5. Security
We use reasonable technical measures to protect the limited data we store (encrypted transport, access-controlled hosting). No method of storage or transmission is completely secure.
6. International users
We and our infrastructure providers may process data in the regions where they operate. By using the App you understand data may be processed there.
7. Children
The App is for merchants and their store visitors and is not directed to children.
8. Your rights
Depending on your location (e.g., GDPR, CCPA/CPRA, PIPEDA), you may have rights to access, correct, or delete personal data we hold about you. Because we hold only a store session record and no customer personal data, most requests are satisfied by uninstalling (which deletes the record) or by contacting us at hello@amrita-labs.com.
9. Changes
We may update this policy; we'll change the "Last Updated" date above and, for material changes, note it in the App listing.
10. Contact
Amrita Labs — hello@amrita-labs.com