Privacy Policy
Last updated: 21 September 2026
1. Who processes the data
LeadArcade ("the app") shows gamified popups on Shopify storefronts and is operated by Pirkeres LTD. The merchant is the data controller; LeadArcade is the data processor. Contact: destek@leadarcade.app
2. What we process
From the storefront visitor:
- Browser identifier (visitorId): a random value generated in the visitor's browser, used to stop the same browser playing over and over. It cannot be linked to a person.
- Salted IP hash: the raw IP address is never stored. A one-way hash is kept solely to rate-limit abuse.
- Game record: which campaign ran, which prize was drawn, which discount code was issued.
- Consent record: the timestamp the consent box was ticked and the exact consent text shown at that moment.
Passed through but not stored: the first name, last name, email and phone the merchant chooses to collect. They travel through the /claim endpoint, are written to Shopify within the same request, and are dropped from memory. No table, backup or log keeps them. All that remains on our side is a "lead was handed over" timestamp.
Never processed: addresses, order data, payment data. The app's Shopify scopes are limited to creating discounts and writing the customer record: read_discounts, write_discounts, write_customers.
From the merchant: shop domain, Shopify access token, and the name and email Shopify provides for the admin session.
3. Where contact details go
The merchant decides which details the popup asks for — first name, last name, email, phone, or none at all. When the visitor fills the form and ticks the consent box, the details are sent to the LeadArcade server and, within the same request, written to the merchant's Shopify customer list (tagged leadarcade) before being dropped from memory.
Marketing consent is recorded per channel collected: email consent when an email address is given, SMS consent when a phone number is given. To opt out, use the unsubscribe link in the messages Shopify sends or contact the merchant directly.
Why it passes through our server at all: the email used to be posted straight from the browser to the store's newsletter endpoint. That path cannot carry a phone number. To let merchants collect phone numbers, the write moved to the server — the "store nothing" principle did not change.
4. Where data is stored
Data is held in PostgreSQL on servers in Germany (Hetzner Online GmbH). All connections are encrypted with TLS, and the production database sits on a LUKS-encrypted volume. Backups are encrypted with AES-256 and kept for 30 days. The Shopify access token lives only in the session store; no second copy is made.
5. How long we keep it
- Game and event records: until the campaign is deleted, the app is uninstalled, or the retention window (365 days) passes — a daily job deletes what is older.
- On uninstall the access token is deleted immediately.
- 48 hours after uninstall, Shopify's
shop/redactwebhook deletes everything belonging to that shop.
6. Who we share it with
Nothing is sold and nothing is shared for advertising. Our sub-processors are Shopify Inc. (app platform) and Hetzner Online GmbH (server hosting, Germany).
7. Your rights
For access, rectification, erasure and objection rights under GDPR, CCPA/CPRA and Turkish KVKK, contact the merchant or us directly. We answer Shopify's customers/data_request, customers/redact and shop/redact webhooks within 30 days.
8. Cookies
The app sets no cookies on the storefront. For the "don't show this visitor again" rule, only a random identifier and the last play time are written to the browser's localStorage.
9. Changes
Material changes to this policy are published on this page with a new date, and merchants are notified by email before the change takes effect.