Privacy policy

Last updated: 11/10/2026. We collect as little as the service needs, keep it for a stated time, and set no cookie except the one that keeps you logged in to your account.

Who is responsible

The data controller is the publisher of this site, identified in the legal notice. Contact: hello@shiprateguard.com.

What we collect, why, and for how long

Data	Why	Legal basis	Kept
Server log: IP address, date, page requested (including the store address you test), referrer, browser identifier	Security, abuse prevention, rate limits, anonymous audience counts	Legitimate interest	90 days, deleted automatically
Free check results	Showing you the result	Legitimate interest	In memory for 10 minutes; never written to disk
Unconfirmed monitoring sign-up: email address, store address, sign-up IP	Sending the confirmation link	Pre-contractual steps	7 days, then deleted
Monitoring: email address, store address, sign-up IP, check results and history	Running monitoring and sending alerts	Contract	Until you stop monitoring, then 12 months, then deleted
Extra alert addresses added by an account holder	Sending alerts to that address, after it confirms	Consent of that address	Until it unsubscribes or is removed; unconfirmed after 7 days; at the latest with the account
Account login: a random session identifier and one-time login links (stored only as fingerprints), with their dates	Keeping you logged in to your account	Contract	Login links: 15 minutes. Sessions: until you log out, at most 30 days
Live carrier rates read for a store: store address, product variant, country, delivery options and prices, time read. Nothing about you	Asking Shopify less often: a recent reading is reused by the free check	Legitimate interest	24 hours, deleted automatically
Billing: name, email, Stripe customer and subscription references, invoices	Billing and accounting	Legal obligation	In Stripe and our accounting records for 10 years (French accounting law)

Card details are entered on Stripe's pages and never reach us.

Who else receives data

Stripe (payments), which may process data in the United States under appropriate safeguards; see Stripe's privacy policy.
OVH SAS (hosting), France
Our own email server, to send alerts, France.

We do not sell data and do not use advertising or tracking tools.

Cookies

One, and only if you log in to your monitoring account: srg_session, which keeps you logged in for up to 30 days and is deleted when you log out. It is strictly necessary for the account to work, so it does not require consent. No audience-measurement, tracking or advertising cookies. The store check uses a short-lived reference in the page itself, not a cookie.

Your rights

You can ask to access, correct or delete your data, object to its processing, or receive a copy, by writing to hello@shiprateguard.com. You can also complain to the CNIL (cnil.fr).