Privacy policy

This policy covers two things: this website (usecordon.com) and the Cordon app for Shopify. It is written in plain language on purpose.

This website

usecordon.com sets no cookies and loads no analytics unless you explicitly consent. If you accept the analytics prompt, we use PostHog and Google Analytics to understand which pages are useful. We do not run advertising trackers and we do not sell or share visitor data with anyone.

The free store scan

If you run a store scan, we make around seven requests to pages on that store that are already public, using a user agent that identifies us. We never log in and we change nothing. The products shown in your report are passed straight to your browser and are not saved. The scan result is cached against the store address for 30 minutes so a repeat scan does not hit the store again.

If you have accepted the analytics prompt, the store address you entered is included in the analytics event, so we can see which stores the tool is useful for. If you decline, nothing is recorded.

If you ask us to email the report

Giving us your email address on the results page is optional and the full report is on screen either way. If you do, we use it to send you that one report, and it is stored by Resend, our email provider, so we can honour a later request to delete it. We forward the same report to ourselves so we can follow up if you reply. We never sell it.

There is a separate, unticked box for occasional emails about keeping a store safe. We only add you to that list if you tick it, and it is the only thing that list is used for. Every one of those emails has a one-click unsubscribe. Ticking it is not required to get your report. To be removed from everything, email support@usecordon.com and it is done the same day.

The Cordon app

Cordon inspects storefront traffic to make allow-or-block decisions for the merchants who install it. In GDPR terms, the merchant is the data controller and Cordon is a data processor. A data processing agreement is available.

What the app processes

• IP addresses, used in memory to make the blocking decision. In the visitor log, IPs are stored only as SHA-256 hashes computed with a salt that rotates daily. Once the salt rotates, historical hashes are permanently irreversible; neither we nor the merchant can recover the original IP.
• Request metadata: country, network operator (ASN), user-agent string, and the rule that matched. None of this identifies a person.
• Shop configuration: the merchant's rules, presets, and plan, tied to the shop, not to any customer.

How the app itself is measured

Inside the Shopify admin we record how the Cordon app is used, so we can see where merchants get stuck and fix it. That means page views, clicks, and a replay of the screen while the app is open. This is about the merchant using Cordon, never about their customers.

Cordon runs in a frame of its own, so what is recorded is the Cordon interface and nothing else. We cannot see the rest of your Shopify admin, your products, or your orders, and recording stops the moment you leave the app. Everything you type is masked before it leaves your browser, and so is your visitor log, because your traffic is your business and we do not need to see it to know where you clicked.

This goes to PostHog on their EU servers, tied to the shop address so we can tell one store from another. Ask us and we will switch it off for your store, or delete what we have.

What the app never does

• Store raw IP addresses in long-term logs
• Read customer names, emails, addresses, or order contents
• Sell, share, or repurpose traffic data for anything beyond blocking
• Track visitors across different stores

Data retention

Visitor log entries expire automatically. Shop configuration is deleted after the mandated retention window when a merchant uninstalls, following Shopify's GDPR webhook requirements (shop/redact, customers/redact, customers/data_request), which Cordon implements in full.

Your rights

Under the GDPR you can request access, correction, or deletion of personal data. Because the app stores IPs only as irreversible hashes, there is usually nothing personal to retrieve, but we will answer every request. Contact support@usecordon.com.

Contact

Cordon operates from the Netherlands and serves merchants in the EU and US. For any privacy question, email support@usecordon.com.