Overview
Cart Stalker is a Shopify application from Rozeweb, Inc. that helps merchants understand storefront visits, cart activity, and abandonment. Store data is visible only to the authenticated merchant whose Shopify store generated it.
Data we collect
When a visitor browses a participating Shopify storefront, Cart Stalker may collect:
- Anonymous Shopify client identifiers and browser-session identifiers.
- Page views, landing page, last page, and referring website.
- UTM campaign parameters and advertising click identifiers.
- Cart activity, products, variants, SKUs, quantities, prices, and currency.
- Customer ID, name, and email only when Shopify provides approved fields for a signed-in customer.
- IP address and approximate country, region, city, latitude, and longitude.
- Browser, operating system, device type, and user-agent information.
- Cart status, value, activity times, and abandonment time.
Cart Stalker does not collect passwords or payment-card information.
How we use data
We process this information only to provide the merchant-facing product, including:
- Live session and cart activity.
- Cart conversion, abandonment, and recoverable-value reporting.
- Traffic-source, landing-page, device, and approximate location analytics.
- Association of a cart with a customer when Shopify supplies an approved identity.
We do not sell, rent, or share collected data with third parties for advertising.
Consent and Shopify Web Pixels
Storefront events are collected through Shopify's Web Pixels and Customer Events platform. The pixel requires analytics permission and runs only when Shopify's customer privacy system permits analytics processing. It does not require marketing or preferences permission and is declared as not selling data.
Retention and deletion
Data is retained while the merchant has Cart Stalker installed. When the app is uninstalled, the application removes the store's sessions, carts, settings, and authentication records. Shopify's mandatory shop-redaction webhook provides an additional deletion safeguard.
Customer rights
Customers can request access to or deletion of personal data through the merchant whose storefront they visited. Merchants can contact us to fulfill a verified request. Cart Stalker handles Shopify's customers/data_request, customers/redact, andshop/redact compliance webhooks.
Security and service providers
Data is encrypted in transit using HTTPS and merchant access requires valid Shopify authentication. Approximate location is derived with the local geoip-litedatabase; IP addresses are not sent to a third-party geolocation service.
Contact and policy changes
We may update this policy as the product or applicable requirements change. The current revision date will always appear at the top of this page.
Privacy questions and verified data requests can be sent to [email protected].