Privacy policy

Last updated 11 October 2026. This page is the public policy URL for the Shopify app and Google Auth consent screen.

Micrositeify (“we”, “the app”) is a Shopify application that builds brand microsites from a merchant’s catalog and hosts them on our platform. This policy describes the data we handle when you install or use the app.

Who this covers

Merchants who install the app, and staff who open it in Shopify Admin. Shoppers who visit a microsite are not asked to create an account. Microsite pages may load product titles, images, and descriptions that already exist on the merchant’s store.

Data we process

• Shop identity. Shop domain, shop id, and offline access tokens needed to call Shopify Admin GraphQL after install.
• Catalog. Product titles, handles, images, vendor/brand, and destination URLs we read with read_products.
• Files you upload in the app. Hero and logo images go to Shopify Files (read_files, write_files). We do not keep a second media library.
• Sites and domains. Microsite settings, hostnames, and DNS instructions. If you buy a name, the registrar (your Cloudflare Registrar account or NiceNIC) processes registrant contact data. We do not store card numbers.
• Optional Cloudflare connection. OAuth tokens used only to search, check, buy, and set DNS on your Cloudflare account.
• Optional Google connection. If you click Connect Google, we store OAuth tokens for your Google account so we can verify a host you already serve through us, add that URL-prefix property to your Search Console, and submit its sitemap. We do not get your Google password. Properties stay on your Google account if you disconnect.
• Optional Microsoft / Bing connection. If you click Connect Bing, we store OAuth tokens for your Microsoft account so we can verify the same host in Bing Webmaster Tools. IndexNow pings do not require this connection.

What we do not do

• We do not write products, inventory, or checkout on your store.
• We do not run a cart or take payment on the microsite.
• We do not sell personal information.
• We do not use customer personal data from Shopify for advertising networks.

Shopify compliance webhooks

We implement Shopify’s mandatory webhooks: customer data request, customer redaction, shop redaction, and app uninstall. After uninstall we delete the stored shop session. After a shop redaction we delete that shop’s sites, catalog cache, and tokens.

Processors

• Shopify. Authentication, catalog, Files, and app install.
• Cloudflare. Hosting, DNS, TLS, and optional merchant Registrar.
• Google. Optional Search Console and site verification when you connect a Google account.
• Microsoft / Bing. Optional Bing Webmaster Tools when you connect a Microsoft account. IndexNow submissions go to participating search engines without that connection.
• NiceNIC. Domain registration when Cloudflare Registrar is not connected.

Retention

Shop tokens and site records are kept while the app is installed and the site is active. Uninstall and Shopify redaction webhooks remove that shop’s data. Registrar billing records stay with Cloudflare or NiceNIC under their own policies.

Contact

Privacy questions: hello@micrositeify.com. Public site: https://micrositeify.com/.