Privacy Policy
Last updated: not yet published
Structure only — no policy text has been written
Every heading below is a required item from doc #8 §17.1, in its order. The prose is deliberately
absent rather than drafted, because doc #8 is explicit that these are written from §9's data
inventory, not from a generator, and that generator-shaped sentences which do not apply to
us — cookies, advertising partners, “we may share with affiliates” — are
absent rather than boilerplated in. A policy describing processing we do not do
is a policy that cannot be checked against the store nutrition labels.
Do not deploy this page until every block below is replaced with real text.
Do not deploy this page until every block below is replaced with real text.
1. Who we are
Trading name, virtual-office address, and
support@shtopit.com. Doc #8 §16.
Blocked on long-lead #3b — without the virtual office a home address is published on every EU product page.2. What we hold
§9.1's inventory in plain language, grouped as the user recognises it —
including the sentence that we hold the list of things they wanted and did not buy.
3. Why we hold it
Each category's purpose and legal basis. Doc #8 §11.
4. Analytics
Names PostHog, the EU region, legitimate interest, and the opt-out and where to find it (Settings).
5. What is never an analytics property
Doc #8 §9.3's five, verbatim, as a list — the commitment doc #6 §14.0 asked to be written down.
They are enforced in code by the typed bag in
src/analytics/track.ts, where each is typed never.6. Who processes data for us
The three processors by name with their regions, and the plain sentence that
RevenueCat stores subscription state in the United States under Standard Contractual Clauses. Doc #8 §3.
7. What we do not collect
§9.4 as a list, including the two architectural ones:
no shielded-app identifier ever leaves the device, and no payment details ever reach us.
8. How long we keep it
§15.1's retention windows, and “we hold no backups” (§15.3).
Note: §15.3's Pro upgrade would change that sentence, and item 14's mechanism is how the change is notified.
9. Deleting your data
§15.4's wording, both paths, and a link to the web flow.
Must state that deletion does not cancel the subscription.
10. Your rights, and how to use them
§16.2's list, with the one-month statutory commitment and
support@shtopit.com as the route.11. International transfers
The one transfer, named: RevenueCat, US, SCCs + UK IDTA. Doc #8 §3.
12. Age
The 16+ minimum, and that we do not verify age — stated rather than implying an assurance we do not perform. §16.1.
13. For California residents
CCPA/CPRA notice-at-collection, the rights list, and the “we do not sell or share” statement. §16.
14. Changes to this policy
A “last updated” date and the commitment that material changes are notified in-app before they take effect.
15. Claims we will not make
Not a section to publish — a constraint on every section above. Doc #8 §17.1 item 15,
from doc #1 §8: no “we never see your data”, no “military-grade encryption”, no “we don't collect anything”.
Delete this heading once the policy is written; keep obeying it.