Sizewright Size Charts — Privacy Policy

Last updated: 2026-10-05. Sizewright Size Charts is provided by Graham Tizzard, trading as SteadyKeel, England, who is the data controller for the data described here.

What we collect

When you install Sizewright Size Charts, we collect and store:

• Your shop's .myshopify.com domain.
• Offline access and refresh tokens issued by Shopify, used to read your product/collection list, check your Shopify-managed subscription status, and renew offline access. Both tokens are stored encrypted at rest, together with their expiry metadata.
• The size chart tables you create (titles, measurement columns and rows, unit preference) and which products or collections you assign them to.

We do not request or store:

• Customer profiles (names, emails, addresses) or order history. The app never requests customer or order scopes. Transient request processing is described below.
• Payment card details — all billing runs through Shopify's own managed pricing; we never see your card and never handle a charge ourselves.
• Analytics cookies or any storefront visitor tracking.
• The name or email of the staff account that installed the app.

Storefront behaviour

The "Size guide" block on your storefront calls our app through Shopify's App Proxy to fetch the chart assigned to the product being viewed. App-proxy requests can include a logged-in customer ID and the visitor's IP address. These identifiers are processed transiently when handling and verifying the signed request; all signed query parameters, including any customer ID or IP forwarded in the query, are included in signature verification. The network IP is transient request metadata. We do not store these IDs or IPs in the application database or application logs, use them for tracking, or include them in chart responses. Customer privacy webhook payloads are also handled transiently and are not stored.

Retention

If you uninstall the app, we delete your shop's data (access and refresh tokens, charts, assignments) within 72 hours, or immediately if Shopify sends us a shop/redact webhook, whichever comes first.

Data requests

Shopify sends us customers/data_request and customers/redact webhooks on behalf of your customers. Because the application does not retain customer profiles or request identifiers, there is no retained customer record to return or erase for those requests. The handlers are implemented; live Shopify webhook delivery has not been verified in this local review.

Where data is stored

Shop and chart data is stored in a Cloudflare D1 database operated by SteadyKeel, using Cloudflare, Inc. as our hosting processor. Data may be processed outside the UK under Cloudflare's standard contractual safeguards. Offline access and refresh tokens are encrypted at rest.

Why we use it

We use this data only to provide the app to you (performance of our contract with you). We never sell it or use it for advertising.

Contact

Questions or requests about your data: steadykeeluk@gmail.com (also our App Store support and emergency developer contact).

Changes

We'll update this policy and the "last updated" date above if what we collect or how we use it changes, and note the change in the app's changelog.