Privacy policy

This policy covers two things: this website (usecordon.com) and the Cordon app for Shopify. It is written in plain language on purpose.

This website

usecordon.com is a static marketing site. It sets no cookies and loads no analytics unless you explicitly consent. If you accept the analytics prompt, we use PostHog to understand which pages are useful. We do not run advertising trackers and we do not sell or share visitor data with anyone.

The Cordon app

Cordon inspects storefront traffic to make allow-or-block decisions for the merchants who install it. In GDPR terms, the merchant is the data controller and Cordon is a data processor. A data processing agreement is available.

What the app processes

• IP addresses, used in memory to make the blocking decision. In the visitor log, IPs are stored only as SHA-256 hashes computed with a salt that rotates daily. Once the salt rotates, historical hashes are permanently irreversible; neither we nor the merchant can recover the original IP.
• Request metadata: country, network operator (ASN), user-agent string, and the rule that matched. None of this identifies a person.
• Shop configuration: the merchant's rules, presets, and plan, tied to the shop, not to any customer.

What the app never does

• Store raw IP addresses in long-term logs
• Read customer names, emails, addresses, or order contents
• Sell, share, or repurpose traffic data for anything beyond blocking
• Track visitors across different stores

Data retention

Visitor log entries expire automatically. Shop configuration is deleted after the mandated retention window when a merchant uninstalls, following Shopify's GDPR webhook requirements (shop/redact, customers/redact, customers/data_request), which Cordon implements in full.

Your rights

Under the GDPR you can request access, correction, or deletion of personal data. Because the app stores IPs only as irreversible hashes, there is usually nothing personal to retrieve, but we will answer every request. Contact support@usecordon.com.

Contact

Cordon operates from the Netherlands and serves merchants in the EU and US. For any privacy question, email support@usecordon.com.