ScanSell QR

Privacy policy

Last updated: 15 November 2026

ScanSell QR is a Shopify app made by DeepSeaTools, India. This page explains, in plain words, what data the app uses, why, and when it's deleted. It covers the app and this website.

In short
  • We store your store's domain and your QR code settings.
  • Each scan is recorded with its time, device type and country (no IP, no cookies).
  • We don't store your customers' names, emails, phone numbers or addresses.
  • When you uninstall, your data is deleted automatically about 48 hours later. Only a record that points your old printed codes to your store's home page is kept.
  • We never sell or share data, and never use it for ads.

About your store

  • Your myshopify.com domain and your store's main domain, so scans reach the right store.
  • An access token from Shopify, so the app can read your products, collections, discount codes, your plan, and, for order tracking, new orders. Until order tracking is active, the app asks for order access but doesn't use it. The token belongs to the store, not to a staff member.
  • Your QR codes: title, destination (product, variant, collection or store page), discount code, colours and caption.
  • Logos you upload. Each logo is stored once and shared by the codes that use it.
  • Your plan, when it was last checked, and when you installed or uninstalled the app.

When someone scans a code

The app sends the shopper to your chosen page and records:

  • the time;
  • the device type (iOS, Android, desktop or other), worked out from the browser. The browser details aren't kept;
  • the country, as worked out by Cloudflare.

The app never stores IP addresses. Cloudflare processes them to deliver requests and determine country, under its own data processing terms. Bots and link checkers aren't counted. The link carries a tag naming the code (utm_source=scansell and the code's ID) so a later order can be matched to it. Once the shopper is on your store, your store's privacy policy applies.

Orders (coming soon)

Order tracking isn't active yet. Once it is, the app receives each new order from Shopify but uses only the order ID, total, currency, the _scansell cart attribute and the landing page's UTM tags. If the order came from one of your codes, it keeps the order ID, total and currency for that code. Other orders aren't kept. No customer details from the order are used or stored.

What we never collect

  • Customer names, emails, phone numbers or addresses.
  • Shoppers' IP addresses.
  • Payment details. Shopify handles billing.
  • Anything on this website: no cookies, no third-party scripts or fonts, no analytics.

Why we use it

Only to run the app for you: redirecting scans, showing scan (and, once active, order) statistics per code, keeping codes working when products change, and applying your plan. Your store's data is yours; we process it on your behalf (see how we handle your data). We never sell or share it, use it for ads, or combine it across stores.

Shoppers' consent

The app sets no cookies on shoppers' devices, runs no scripts in your storefront, and uses scan and order data only for per-code statistics, never for advertising or profiling. It doesn't sell or share personal information, so it doesn't override shoppers' consent or opt-out choices in your store.

Where it's kept

  • Cloudflare hosts the app and its database (Workers and D1), and may process data in data centres around the world. Data is encrypted in transit (HTTPS) and at rest.
  • Cloudflare's per-request logs are turned off for the app. The app writes a few diagnostic log lines (such as a store's domain, a code's ID, an error message, or the order IDs in a customer data request). Cloudflare keeps these for up to 7 days. They never contain customer names, emails, phone numbers, addresses or IP addresses.
  • Shopify runs the platform and billing, under its own privacy policy.
  • Only you, in your Shopify admin, and we, to run and support the app, can see your data.

How long we keep it

  • While the app is installed.
  • When you uninstall, the app's access token is deleted straight away.
  • About 48 hours later, Shopify asks us to delete your store's data, and the app deletes all of it: codes, logos, scans, order records and your store record. If you reinstall before then, your data is kept.
  • We keep only each old code's short ID and your store's home page address, indefinitely, so printed codes still reach your store and IDs are never reused.

Your customers' requests

The app stores no customer names, emails, phone numbers or addresses. Once order tracking is active, it holds order records (ID, total, currency) linked to a customer's orders. When Shopify sends a customer deletion request, the app deletes those records for that customer's orders in your store. When Shopify sends a customer data request, the app notes which of that customer's orders it holds, and we send you that data on request.

Your choices

You can see your codes and their statistics in the app, download them, and delete codes you don't need. To get a copy of your data, correct it, or delete it sooner, email support@deepseatools.in. Uninstalling deletes your data automatically. See Support. You can also contact your local data-protection authority.

Changes

If we change how the app uses data, or add a new provider, we'll update this page and the date at the top.

Contact

support@deepseatools.in, DeepSeaTools, India.