Privacy

The store address you type. We fetch the public pages at that address — the same pages Google fetches — and read them. We never sign in to a store, never ask for admin access, and never change anything.

Your email address, if you enter one. Two places ask for it: the point in the report where you can unlock the rest, and the offer at the end where you can ask us to do the writing for you. Both are optional and the first one has a visible way past it.

Your note, if you write one. The optional box on the offer form. Don't put anything confidential in it.

When you submit an email we store it with the store domain you scanned, the score that scan produced, whether you asked for the report or for the done-for-you work, your note, and how you arrived — a referring site, or the utm_source, utm_medium and utm_campaign values in the link you clicked, if there were any.

Separately, the site counts events: a page was viewed, a scan started, a scan finished, an issue was expanded, someone asked for a fix. These carry the store domain, the score, the page path and the same arrival information. They do not carry your email address and they are not tied to you by any identifier — there is no visitor ID, no fingerprint and no cookie to tie them to.

Our host passes your IP address to the server with every request. We use it for one thing: counting scans so a single visitor can't start dozens at once. That count lives in the memory of the running server, is never written to a file or a database, is never sent anywhere, and disappears when the server restarts — which happens constantly on this kind of hosting.

Our host, Vercel, keeps its own request logs for its own operational purposes. That is outside our control and is covered by their privacy policy.

Leads and events are sent to a Google Sheet we own, through a Google Apps Script web app. That means Google processes this data as our hosting provider. There is no other database, no CRM and no analytics company involved.

The site itself is hosted on Vercel. The fonts are bundled with the site when it is built, so your browser never makes a request to Google Fonts.

One thing is kept in your own browser: a small record of how you first arrived, in session storage. It is erased when you close the tab, it is not a cookie, and it never leaves your browser unless you submit a form.

We use it to write to you about the store you scanned. That is the only use.

To be exact about what happens today: nothing is sent automatically. There is no mailing list, no sequence, and no unsubscribe link, because there is nothing to unsubscribe from. A person reads the sheet and replies. If that ever changes — if we add a newsletter or any automated mail — this page and the form that collected your address will say so before it does, and the mail will carry an unsubscribe link.

We do not sell, rent, share or trade your address with anyone.

A report link like /r/yourstore.com is public: it contains a store domain, and anyone who has the link can open it and see the findings for that store. It only ever shows information already published on that store's own public pages. It does not contain your email address or anything else about you.

Opening one runs the scan again from scratch, which is why two people opening the same link a month apart can see different scores.

Email andrew3333422@gmail.com from the address you gave us and we will delete the row and confirm. No form, no account, no waiting period. Ask us what we hold on you and we will send you the row itself.

StoreFix is a tool for people who run shops. It is not directed at children and we do not knowingly collect anything from anyone under 13.

If this page changes, the date at the top changes with it. Material changes to what we collect or what we do with it will be described here rather than quietly swapped in.

StoreFix is run by one person. See the about page for who that is, or write to andrew3333422@gmail.com.