Privacy Policy

Last updated: 11/6/2026

Introduction

Card Testing Guard ("we", "our", or "us") is committed to protecting your privacy and handling your data in an open and transparent manner. This privacy policy explains how we collect, use, and protect information when you use our Shopify app.

Information We Collect

When you install and use Card Testing Guard, we may collect:

Store Information: Your Shopify store domain and session data needed to authenticate requests
Settings Data: Your low-value threshold, strict countries, allowed products and variants, campaign codes, block message, attack-mode options, and protection mode
Signing Keys: A secret generated per store to sign storefront passes, stored encrypted and never shared across stores
Checkout Records: For each checkout, the pass status (none, valid, invalid, replayed, or denied), cart subtotal, currency, and whether it became an order. No email, address, name, phone number, or IP address is stored in these records
Pass Usage: Which pass identifiers appeared on which checkouts, used to cancel reused passes
Identity Codes: To spot bots reusing the same email or phone number, a one-way keyed hash of each, which cannot be turned back into the original address or number
Prevented-Attempt Records: The time, reason, cart value, and billing state of each checkout counted for billing
Checkout Test Results: The results and notes you record on the Test your checkout page

Shopify’s checkout webhooks deliver checkout details, including customer fields, to our server. We read them only to compute the records above and do not store or log names, email addresses, phone numbers, or IP addresses.

How We Use Your Information

We use the collected information to:

Issue and verify storefront passes, and hold checkouts that lack a valid one
Detect attacks and, if you opt in, switch attack mode on and off
Show you what CTG did in the last 7 days and which checkouts it held
Count prevented attempts and report them to Shopify for billing
Provide customer support
Ensure security and prevent fraud

Bot Challenge

Storefront passes are issued after an invisible Cloudflare Turnstile challenge. Turnstile runs in the shopper’s browser and is verified by our server with Cloudflare; it is subject to Cloudflare’s own privacy practices.

Data Storage and Security

Data is stored in our database, keyed by your store. We implement appropriate security measures including:

Encrypted data transmission (HTTPS)
Secure authentication via Shopify session tokens, and verification of Shopify’s signatures on app proxy requests and webhooks
Per-store signing secrets encrypted at rest and never logged; the secret itself is never published to your store — only the passes currently valid are
Rate limiting on the endpoint that issues passes
Compliance with Shopify’s security requirements

The list of currently valid passes is stored in a metafield on your store’s checkout rule, which store staff can read. This is accepted and documented: any storefront visitor can already obtain a valid pass, and staff can only ever mint passes for their own store.

We do not sell, trade, or rent your personal information to third parties. We may share information with:

Shopify: As our platform provider, in accordance with their terms of service, including usage events for billing
Cloudflare: For the Turnstile bot challenge
Service Providers: Trusted infrastructure and hosting partners who assist in operating our app
Legal Requirements: When required by law or to protect our rights

Billing

Card Testing Guard bills through Shopify, so charges appear on your Shopify invoice. We never see or store your payment details. See Plans & Billing.

Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Export your data
Withdraw consent for data processing

Card Testing Guard honors Shopify’s mandatory GDPR webhooks for customer data requests, customer redaction, and shop redaction. Because CTG does not store names, email addresses, phone numbers, or IP addresses, there is no customer personal data to return or redact. A shop redaction request removes your store’s remaining records from our database.

Data Retention

Identity codes: deleted after 24 hours
Checkout records: deleted after 90 days
On uninstall: your signing keys, pass usage, identity codes, and cancelled-pass records are deleted right away; the rest (checkout records and test results) is deleted when Shopify sends the shop redaction request, 48 hours later

Uninstalling stops protection immediately, because an uninstalled app’s checkout functions no longer run.

Children's Privacy

Our app is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: team@distylled.com