Mint LabsMint Voteby Mint Labs

Security policy

Last updated October 4, 2026

This policy describes how Mint Labs protects the data Mint Vote handles, including data about shoppers and their friends processed on behalf of merchants. It applies to everyone at Mint Labs with access to our systems.

Data loss prevention

  • We keep as little data as possible. Polls hold product IDs, the optional question and first name a shopper typed, and votes. Devices and connections are recorded only as keyed one-way hashes scoped to each poll; no IP address, email address or customer account is stored.
  • The private results key of a poll is never stored: only its SHA-256 hash, compared in constant time.
  • Our database is Cloudflare D1: encrypted at rest, with automatic point-in-time recovery. Link-preview images are stored in Cloudflare R2, encrypted at rest.
  • All traffic uses HTTPS (TLS). Production and development use separate databases; development never uses real merchant or shopper data.
  • Webhooks and every storefront request are verified with Shopify HMAC signatures; unsigned or tampered requests are rejected. Storefront endpoints accept JSON only, cap request sizes, and are rate-limited per connection, per device and per store.

Access control

  • Only authorised Mint Labs personnel who need it to run and support the app can access production systems.
  • The app has no screen that lets us browse a store's polls; merchants see their own polls in their Shopify admin.
  • Access is removed immediately when it is no longer needed.

Passwords and authentication

  • Every account with access to production (hosting and Shopify Partner) uses a strong, unique password stored in a password manager.
  • Two-factor authentication is required on all of those accounts.
  • API secrets are stored as encrypted environment secrets, never in source code, and are rotated after any suspected exposure.

Logging

  • Every request to the app is logged with a timestamp by our hosting provider's request logs (kept up to 7 days). The app's own log lines never contain questions, names, private keys or IP addresses.
  • Logs are reviewed when investigating errors or suspected incidents.

Security incident response

  1. Report. Anyone can report a suspected issue to support@stickermint.com. We acknowledge reports within one business day.
  2. Contain. We stop the exposure first: disable the affected feature, revoke and rotate keys and access tokens, and block abusive traffic.
  3. Investigate. We use request logs and database history to find what happened, which shops and data were affected, and when.
  4. Notify. If personal data was affected, we notify affected merchants without undue delay and within 72 hours of confirming the incident, and tell Shopify where required, with what happened and what we are doing about it.
  5. Recover. We fix the root cause and, if needed, restore data from point-in-time recovery.
  6. Review. We record each incident and the lessons learned, and update this policy.

Contact

Mint Labs — support@stickermint.com