Privacy Policy
Last updated: November 7, 2026
Revisit is a Shopify app that adds a recently-viewed products row to your storefront. This policy explains what data we access from your store, what we store, and how you can have it deleted. In short: the products a shopper has viewed are kept only in that shopper's own browser. They never reach our servers. Each shopper's recently-viewed list is held in their browser's localStorage on their own device. They can clear it by clearing their browser's site data.
Who we are
Revisit is operated by datadir s. r. o., Bauerova 1205/7, 040 23 Košice, Slovakia (company ID / IČO 57 582 904). We are the data controller for your account data — your store domain, contact details and plan status — and a data processor for store data we handle on your behalf. For any privacy question, contact us at hello@datadir.co.
What data we access
Revisit requests only the Shopify scopes it needs:
- Products (
read_products) — the only scope Revisit requests. The row itself loads product details in the shopper's browser from your own storefront.
What we store
- Your settings: whether the row is on, the number of items, its layout and style, and whether branding is removed.
- Your store's
.myshopify.comdomain and an offline access token, kept server-side and never exposed to the browser.
How we use it
We use this data solely to provide the app to you. We do not sell it, use it for advertising, or share it with any third party except the providers below, and we do not use it for any automated decision with a legal or similarly significant effect on anyone.
Sub-processors
- Shopify — the platform your store and our app run on, under Shopify's own DPA.
- Hetzner Online GmbH (Germany, EU) — application hosting and database.
- Scaleway SAS (France, EU) — encrypted, off-site database backups.
- Bunny.net (BunnyWay d.o.o., Slovenia, EU) — authoritative DNS for our domain.
Retention & deletion
When you uninstall the app, Shopify notifies us and we delete your access token. About 48 hours later, Shopify sends a shop/redact request and we erase all remaining data for your store. Encrypted backups roll off on a 30-day cycle. You can request deletion at any time by emailing hello@datadir.co.
We honour Shopify's customer-privacy webhooks. Because Revisit stores no personal data about your customers, there is nothing to return or erase for an individual shopper.
Security
Data is encrypted in transit (TLS) and backups are encrypted at rest. Each store's data is isolated at the database layer with row-level security. Access to production systems is restricted, on a least-privilege basis, to the operator of the service.
Your rights
If you are in the EEA/UK, you have the right to access, correct, export, or delete the data we hold, to restrict or object to processing, and to lodge a complaint with your supervisory authority (in Slovakia, the Úrad na ochranu osobných údajov SR). Our lawful basis for processing your account and store data is the performance of our contract with you. To exercise any right, contact hello@datadir.co; we respond within one month.
Where your data lives
All personal data is stored in the European Union — application and database on Hetzner (Germany) and encrypted backups on Scaleway (France). We do not transfer personal data to a third country except to Shopify, which processes under its own DPA and adequacy/Standard Contractual Clauses.
Changes to this policy
We may update this policy as the app evolves. Material changes will be posted here with a new “last updated” date.
See also our full legal suite: Terms of Service and Data Processing Agreement.