Privacy Policy for BesPoP - Age Gate

Effective date: April 2026

1. What We Collect

• Age-verification responses: whether the visitor passed or failed the age check and which verification method was used (e.g., self-declaration, date of birth, country selection). No raw dates of birth are stored on our servers.
• Shop information: the Shopify store domain and basic shop metadata required to operate the app and manage billing.

2. What We Do NOT Collect

BesPoP - Age Gate does not collect, store, or process any personal customer data such as names, email addresses, physical addresses, payment details, or browsing history beyond the age-verification event itself.

3. Cookies

A first-party cookie (and optional localStorage entry) is set in the visitor's browser to remember that they have already completed age verification. This prevents Age Gate from reappearing on every page load. The cookie contains only a pass/fail flag and an expiry timestamp, no personal information.

4. How We Use the Data

Verification events are aggregated to provide merchants with anonymous analytics (total verifications, pass/fail rates, method breakdown) displayed in the Shopify admin dashboard. Data is never sold, shared with third parties, or used for advertising.

5. Data Retention

Aggregated verification events are retained for as long as the app is installed. When a merchant uninstalls the app, all associated shop data and verification records are deleted.

6. GDPR & Data Subject Rights

Because we do not store personal customer data, there is typically nothing to return or erase in response to a data-subject request. We fully support Shopify's mandatory GDPR webhooks (customer data request, customer data erasure, shop data erasure) and respond with a 200 acknowledgement.

7. Contact

For privacy-related inquiries, contact us at hello@bespop.com.