LiquidPop

No customer data, at any point

LiquidPop holds no personal data about your customers. No names, no email addresses, no orders, no browsing history, no IP addresses, no identifiers of any kind. The app never requests the permissions that would allow it to read them.

LiquidPop sets no cookie, runs no analytics, and counts no impressions. It does not know how many people saw your popup, and neither do we.

What stays in the visitor’s browser

So that the same popup is not shown again and again to someone who has already closed it, the script remembers that it was displayed. That memory lives entirely in the visitor’s own browser, in two standard web storage areas:

• lp_shown_… in sessionStorage, when you set the frequency to once per session. It is erased when the browser tab is closed.
• lp_ts_… and lp_days_… in localStorage, when you set the frequency to once every few days. They hold a timestamp and a number of days.

These entries hold a digit, a date and a delay. They carry no identifier, they are never read by us, and they are never sent to our servers. A visitor can clear them at any moment from their browser settings.

What the app stores about your store

• Your store domain, used to identify which settings belong to you.
• Your popup content: the title, message, subtitle, button labels, promo code and destination links you write, and the slides of your carousel.
• Your design settings: colors, gradient, typography, glass effect, sizes, position, corner radius, and the rest of the choices made in the app.
• Your display rules: delay before showing, frequency, targeted page, countdown and exit intent.
• An access token issued by Shopify when you install the app. It is what allows the app to talk to your store, and it stops working when you uninstall.

All of it is content you wrote yourself. None of it describes a person.

Images you upload

When you add an image to your popup, it is uploaded to your own Shopify Files library, not to our servers. That is what the read_files and write_files permissions are for, and they are the only permissions LiquidPop requests. The app keeps nothing but the address of the image, so it knows which one to display.

The image stays yours. It remains in your Shopify library after you uninstall, and you delete it there like any other file.

Where it is hosted

The application runs on Vercel and the database is hosted by Neon, both in the United States, in the AWS us-east-1 region in Virginia. Traffic between your store, the app and the database is encrypted in transit. No data is transferred to any other processor, and LiquidPop sends nothing to third-party services.

If you are in the European Union, the only data leaving it is the store data listed above — never anything belonging to your customers.

How long it is kept, and how it is deleted

When you uninstall the app, Shopify notifies us and your session and popup settings are deleted from the database straight away. The access token stops working at the same moment, and the script is no longer served to your storefront.

When Shopify asks us to erase a store — which it does after an uninstall, or on your request — everything belonging to that store is deleted. LiquidPop implements Shopify’s mandatory compliance webhooks, including shop/redact, customers/redact and customers/data_request. The two customer requests return nothing, because there is nothing to return.

Your rights

You may ask at any time what is stored about your store, request a copy, ask for it to be corrected, or ask for it to be erased. Write to contact.zeppelin.studio@gmail.com and you will have an answer within thirty days, usually much sooner.

If this policy changes in a way that affects you, the date below changes and the new version is published here before it takes effect.

Contact

Questions about this policy, or about the data held for your store: contact.zeppelin.studio@gmail.com