Privacy policy
Last updated October 6, 2026
Mint 404 Redirects is a Shopify app made by Mint Labs ("we", "us"). It finds addresses on a merchant's store that show the 404 (page not found) page and helps the merchant redirect them. This policy explains what the app handles, why, and when it's deleted.
The short version
- The app does not collect personal data about shoppers: no names, emails, customer accounts, cookies or IP addresses are stored.
- On the 404 page only, the store reports the missing address (without its query string) and where the visitor came from: the other website's name (for example google.com), or the store page that linked to it.
- The report is skipped when the shopper declined analytics in the store's cookie banner, and it is sent at most once per address per browser session.
- We never sell or share data, use it for advertising, or combine it across stores.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To read and change the store's URL redirects and to read product, collection, page and blog post handles and titles for suggestions. |
| Primary storefront domain and whether the online store is password protected | To build links to the store (test page, "open on store") and show setup hints. |
| Handles and titles of published products, collections, pages and blog posts | To suggest where each broken address should go. Refreshed daily; deleted on uninstall. |
| Settings (auto-fix, ignore list) and a list of the redirects the app created (address, target, date) | To run the app the way the merchant set it up and to offer Undo. |
| Plan status | Read from Shopify to decide which features apply. Plans are chosen on Shopify's plan page and billed by Shopify. |
Information from the storefront
| Information | Why |
|---|---|
| The missing address (path only, no query string, no language folder) and the number of visits, first and last visit date | The 404 log the merchant fixes. |
| The referring website's name (not the full address), or the path of the store's own page that linked there; up to 8 per address | So the merchant can fix the link at its source. |
| The browser's network address and user agent, only while the report is processed | To filter out bots and limit how many reports one connection can send. The address is turned into a keyed one-way hash used by a rate limiter for at most one minute; it is never stored or logged. |
Retention
- Broken addresses not visited for 180 days are deleted; fixed ones one year after they were fixed and last visited.
- The list of redirects created with the app: one year. CSV import results: 90 days.
- When the app is uninstalled, the access token and catalog copy are deleted at once; Shopify asks us to delete all remaining shop data 48 hours later, and we do. Redirects created in the store stay in the store.
Sub-processors
Cloudflare (hosting, database, background jobs) and Shopify. Data is stored in Cloudflare D1, encrypted at rest.
Your rights
Merchants can see and export everything the app holds in the app itself, and can ask us to delete it at any time. Because the app stores no personal data about shoppers, Shopify's customer data and erasure requests find nothing to return or delete; we still answer them.
Contact
Mint Labs — support@stickermint.com