Postage Warden Privacy Policy

Effective: October 19, 2026. Publisher: Front Porch Puzzle Press ("we"). This policy covers the Postage Warden app for Shopify.

Postage Warden is a Shopify app that hides the USPS Media Mail shipping rate at checkout when a shipment contains items that aren't eligible. The checkout rule runs inside Shopify as a Shopify Function. A shop ("merchant") installs Postage Warden from the Shopify App Store. We process data on the merchant's behalf and only to run the app.

What Postage Warden receives

• Store access and basic shop details: the shop's myshopify domain, the permissions granted, and a Shopify access token so the app can act for the merchant. While a staff member uses the app, Shopify's login also supplies that staff member's Shopify user ID, name, email and locale; we use these only to authenticate the app.
• Products: titles, product types, tags and weights, read when the merchant opens the Catalog check, to show which products count as eligible. They are not copied to our servers.
• Postage Warden settings (rate names, tags, product types, weight limit) and per-product eligibility choices. These are stored in the merchant's own Shopify store as app metafields, not on our servers.

We do not collect, store or sell customer information. At checkout the Function sees cart contents (product type, tags, weight, quantity) to make its decision, keeps nothing, and cannot send data anywhere.

Where data is stored

Login sessions (the shop domain, access token and the staff details above) are stored in a database on our app host, Railway, in the United States, encrypted in transit. Settings stay in the merchant's Shopify store. We use no analytics, advertising or tracking tools in the app, and we share no data with anyone else.

Retention and deletion

When a merchant uninstalls the app, we delete that store's sessions straight away. Shopify then sends a shop/redact request 48 hours later, and we confirm deletion. Shopify removes the app's checkout rule and app metafields when the app is uninstalled.

Your rights

Because we hold no customer personal data, customer data requests and redaction requests forwarded by Shopify are answered with "no data held." Merchants can ask what we hold about their store, or ask us to delete it, at hello@frontporchpuzzlepress.com.

Changes and contact

We will post any change to this policy here with a new effective date. Questions: hello@frontporchpuzzlepress.com.