Privacy Policy: ConsentProof

Last updated: July 6, 2026

Who we are

ConsentProof (“the app”) is a Shopify application operated by Beneficial Exchange Inc that shows a cookie consent banner on a merchant's storefront, applies the visitor's choice through Shopify's Customer Privacy API and Google Consent Mode, and keeps a consent log for the merchant. Contact: agentpagoda@gmail.com.

What we collect, and why

• Consent events: when a visitor makes a choice in the banner we record the choice (accept, decline, or custom categories), the time, a coarse region code (for example country and province), the page path, and the anonymous consent identifier generated by Shopify. This is kept so the merchant can demonstrate that consent was collected.
• Store information: the store domain, plan, and the merchant's chosen alert email address, used to operate the app's features such as uptime alerts.

What we do not collect

• No shopper names, emails, addresses, or order contents.
• No IP addresses in the consent log.
• No tracking of shoppers across sites; the app exists to limit tracking, not add to it.

Cookies the app itself uses

The banner stores the visitor's consent choice using Shopify's standard consent mechanism (the _tracking_consent cookie) so the choice is remembered and respected. The app sets no advertising or analytics cookies of its own.

Processors

The application runs on Fly.io (fly.io) infrastructure. Alert emails are delivered via Resend (resend.com).

Data retention and deletion

Consent events are retained while the app is installed so the log remains usable as proof. When a store uninstalls the app, all of the store's data (consent events, settings, and access tokens) is deleted following Shopify's privacy webhook schedule.

Your rights

Merchants can export their consent log at any time and can request deletion of all stored data by contacting us. Because the consent log contains no directly identifying shopper data, shopper-level requests should be directed to the merchant who operates the store.

Not legal advice

ConsentProof provides tooling that helps merchants collect and record consent. It does not provide legal advice, and using the app does not by itself guarantee compliance with GDPR or any other regulation.