Privacy Policy

Effective date: March 2, 2026  |  Last updated: March 2, 2026

Revelio (“we,” “our,” or “the app”) is a Shopify application that provides an interactive discount experience for online shoppers. This privacy policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data.

We wrote this policy in plain language because we believe you should be able to understand it without a law degree.

The short version: We collect the minimum data needed to run the discount game and show merchants how it’s performing. We don’t collect your email, name, payment information, or anything we don’t need. We don’t sell or share your data with third parties for advertising.

1. What Data We Collect

From shoppers who interact with the Revelio widget:

Data Purpose Retention
Session ID Uniquely identify each game session 90 days
Cart total Calculate discount amounts 90 days
Game outcome (cashout or crash) Apply the correct discount and track performance 90 days
Discount percentage and code Generate and apply the Shopify discount 90 days
Shopify customer ID (if logged in) Prevent abuse and enforce cooldown periods 90 days
Timestamp Analytics and session ordering 90 days

From merchants who install the app:

Data Purpose
Shopify store domain Identify the store and link sessions to the correct merchant
Shopify access token Create discount codes and access store data via Shopify’s API (required for app functionality)
App configuration settings Store the merchant’s preferences (discount cap, crash probability, etc.)

What we do NOT collect:

2. How We Use Your Data

We use the data we collect exclusively for the following purposes:

We do not use your data for advertising, profiling, or any purpose unrelated to the operation of this app.

3. Data Sharing

We do not sell, rent, or share personal data with third parties for their marketing or advertising purposes. Data may be shared only in the following limited circumstances:

4. Data Retention and Deletion

Shopper session data (session IDs, cart totals, outcomes, discount codes, and customer IDs) is retained for 90 days and then automatically deleted.

Merchant data (store domain, configuration settings) is retained for as long as the app is installed. When a merchant uninstalls the app, we delete all associated data within 30 days.

5. Your Rights

Regardless of where you are located, we provide the following rights to all individuals:

To exercise any of these rights, contact us at sethcrowley99@gmail.com. We will respond to all requests within 30 days.

6. Data Security

We protect your data using industry-standard security measures, including encrypted connections (HTTPS/TLS) for all data in transit, secure database storage, and access controls that limit data access to essential operations only. No method of electronic storage is 100% secure, but we take reasonable steps to protect your information.

7. Cookies and Tracking

Revelio does not set any cookies on shoppers’ browsers. We do not use tracking pixels, analytics scripts, or any third-party tracking tools on the storefront. The app operates entirely through server-side sessions and Shopify’s existing infrastructure.

8. Children’s Privacy

Revelio is a business tool for Shopify merchants and is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your California privacy rights, contact us at sethcrowley99@gmail.com.

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) provides you with additional rights. Our legal basis for processing personal data is legitimate interest — specifically, the operation of the discount experience that the merchant has chosen to offer to their customers. You may exercise your rights as described in Section 5, or contact your local data protection authority if you have concerns about our data practices.

11. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this privacy policy, your data, or your rights, you can reach us at:

Email: sethcrowley99@gmail.com