Privacy policy
Last updated October 4, 2026
Mint Vote is a Shopify app made by Mint Labs ("we", "us"). It lets a merchant add an "Ask my friends" button to their product pages: a shopper picks 2 to 4 products or variants, gets a vote link on the store's own domain, and their friends vote with one tap. This policy explains what the app handles about merchants, about the shoppers who create polls and about the friends who vote, why, and when it's deleted. For shopper and voter data we act as a service provider (processor) to the merchant, who is the controller.
The short version
- A poll is anonymous: we store the products in it, the optional question and first name the shopper typed, and the votes. No email address, no customer account, no IP address.
- Friends who vote type nothing. Their device gets a random token so it can vote once; we only keep a keyed one-way hash of it, per poll.
- Polls are deleted 30 days after they close (the shopper can delete theirs at any time from the private results link; the merchant can delete any poll).
- We never sell or share poll data, use it for advertising or AI training, or combine it across stores.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To check that a poll's products belong to the store, publish the button's settings to the storefront, and (Plus, if switched on) create thank-you discount codes. |
| Store name, primary domain and currency | To build links on the store's own domain and show revenue in the store's currency. |
| Settings (poll length, texts, colours, blocked words, thank-you code options) | To run the button and the vote pages the way the merchant set them up. |
| Plan (Free, Pro or Plus) and its dates | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
| Daily totals (polls, votes, page views, product clicks, add-to-carts, paid orders and revenue from vote links) | The merchant's analytics. Numbers only. |
Information about shoppers who create a poll
| Information | How it's used | Kept |
|---|---|---|
| The poll's products and variants (Shopify IDs and product handles) | To show the options on the vote page. Titles, images and prices are read live from the store, never stored. | Until 30 days after the poll closes |
| The optional question (up to 100 characters) and first name (up to 24 letters) the shopper typed | Shown on the vote page, in link previews and to the merchant. Checked first: links, email addresses, @handles, phone numbers and listed words are refused. | Until 30 days after the poll closes |
| A one-way hash of the private results key (the key itself is only in the shopper's link) | So only the holder of the link sees the results, closes or deletes the poll and sees a thank-you code. | With the poll |
| A keyed hash of the creating device's random token, scoped to the poll | So the shopper's own vote doesn't count toward a thank-you code. | With the poll |
| Thank-you discount code (Plus, if the merchant switched it on) | Created in the merchant's Shopify Discounts (single use, the poll's products only); we keep the code to show it again on the results page. | With the poll; the discount itself is in the merchant's store |
Information about friends who vote
| Information | How it's used | Kept |
|---|---|---|
| The option voted for, the time, and a keyed hash of the device's random token (scoped to the poll) | To count the vote and allow one vote per device. | Until 30 days after the poll closes |
| A keyed hash of the connection's IP address, scoped to the poll | To limit how many votes one connection can add to a poll. The IP address itself is never stored, and the hash differs in every poll. | Until 30 days after the poll closes |
| Rate-limit counters keyed by a one-way hash of the IP address or the device token | To stop automated polls and votes. | Deleted within 2 days |
Cookies and browser storage on the store
Set on the store's domain only after a shopper or friend takes an action (never just for visiting), and never used for advertising:
mv_dev(cookie and local storage, 1 year): a random device token, set when a person votes or creates a poll, so they vote once per poll.mv_r_<poll>(cookie and local storage, until 30 days after the poll closes): a signed receipt of the vote, so the page shows that device the results.mv_pollsandmv_k_<poll>(local storage): the creator's own poll links and private key, on their device only.mv_recent(session storage, cleared when the tab closes): products viewed in this visit, offered in the poll sheet. Not set when Shopify's customer privacy settings say the visitor declined preferences.
Orders (Plus analytics)
With Plus, the app counts paid orders and revenue from "Buy the winner": Shopify sends paid orders to the app, and only lines carrying the app's _mint_vote line property are counted. We keep the order ID and the amount for 60 days (so an order isn't counted twice), then only the daily totals. No customer name, email, phone number or address is read or stored.
Customer privacy requests
- Access requests (Shopify's
customers/data_request): polls are not linked to customer accounts. The only related data is the order ID and amount of the customer's orders with a vote-link line (Plus), which the merchant already has in Shopify. - Erasure requests (
customers/redact): we delete the stored order IDs and amounts of the orders Shopify lists. - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we delete everything we hold for the store, preview images included. If that request never arrives, we delete it all 30 days after uninstall anyway.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting, database in North America, image storage for link previews) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Every storefront request is signed by Shopify and checked before anything is stored. Access is limited to Mint Labs staff who need it to run the service. We use no other sub-processors, analytics or trackers. See our security policy.
Retention
Polls (with their options, votes, texts, preview image and thank-you code record) are deleted 30 days after they close, checked daily, or earlier when the shopper or merchant deletes them. Order IDs are deleted after 60 days. Access tokens are deleted as soon as the app is uninstalled, everything else 48 hours later (at the latest 30 days after uninstall). Cloudflare keeps the app's request logs for up to 7 days for operations; the app's own log lines never contain questions, names, private keys or IP addresses.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. A shopper can delete their poll from its private results link; the store can delete any poll. You can also email us and we'll pass the request to the store. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs — support@stickermint.com