Privacy Policy
Last updated: September 24, 2026
Attributly (“the App”, “we”) is a marketing attribution application for Shopify stores. This policy explains what data the App collects from a merchant’s storefront, why we collect it, how long we keep it, and how it can be deleted.
1. Data we collect
The App is designed to store as little as possible. We do not collect customer names, email addresses, phone numbers, shipping or billing addresses, or any payment information.
| Field | What it is | Why |
|---|---|---|
| Anonymous browser ID | A random identifier generated in the visitor’s browser (stored in a first-party cookie, atly_cid) | Group sessions belonging to one visitor |
| Session ID | A random identifier regenerated after 30 minutes of inactivity (atly_sid) | Count unique visits |
| Marketing touchpoints | UTM parameters, advertising click IDs (gclid / fbclid / ttclid / msclkid), referrer and landing page path | Attribute orders to the campaign that drove them |
| Order data | Order ID, order number, order total, currency, line item count and the timestamp of purchase | Calculate revenue and conversion rate by channel |
All identifiers are random values. They are not derived from, and cannot be used to recover, an individual’s identity.
2. How we use it
Data is used solely to produce attribution reports for the merchant who installed the App — for example, revenue and conversion rate grouped by traffic source, medium or campaign. We do not sell data, do not use it for advertising, and do not share it with third parties.
3. Legal basis and consent
On the storefront, non-essential cookies are written only after Shopify’s Customer Privacy API reports that analytics processing is allowed for the visitor’s region. The session identifier is treated as a strictly necessary functional cookie.
4. Retention
| Plan | Retention |
|---|---|
| Free | 90 days. Attribution reports cover at most the last 30 days. |
| Pro | 730 days. Attribution reports cover up to the full retention window. |
An automated cleanup job permanently deletes records older than the retention window every day.
5. Deletion
- Uninstalling the App immediately deletes the store’s configuration and access tokens.
- shop/redact (sent by Shopify after uninstall) permanently deletes all remaining visits, conversions, subscriptions and settings for that store.
- customers/redact and customers/data_request are handled as well. Because the App stores no personally identifiable customer data, there is no personal record to export or erase; the request is logged and acknowledged.
- A merchant may also request deletion at any time by emailing us.
6. Security
Data is transmitted over HTTPS and stored in a PostgreSQL database with access restricted to the App servers. Storefront reports are authenticated with a per-store HMAC signature, and ingestion is rate-limited.
7. Changes
We may update this policy. Material changes will be reflected in the “Last updated” date above.
8. Contact
Questions or deletion requests: junitzhen@gmail.com