Compliance Sentinel

Compliance Sentinel "the App" provides age verification and age gate functionality "the Service" to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

Personal Information the App Collects

Compliance Sentinel is designed with a privacy-first approach. The App operates entirely as a Shopify Theme Extension with all logic running client-side in the visitor's browser. The App does not require any Shopify API access scopes and does not read, collect, or transmit data from your Shopify account to external servers.

When you install the App, we access the following from your Shopify account:

• Theme extension configuration settings — the preferences you set in the Shopify Theme Editor (such as minimum age, style preset, and display options). These settings are stored by Shopify as part of your theme configuration.

The App stores the following information locally in the visitor's browser (via localStorage or sessionStorage):

• Age verification token — a small data object containing the verification status, minimum age confirmed, and an optional expiry timestamp. This token does not contain any personally identifiable information (PII) such as names, dates of birth, email addresses, or IP addresses.

How Do We Use Your Personal Information?

Because the App collects minimal information, usage is limited to:

• Providing the age verification Service and operating the App
• Remembering a visitor's age verification status so they are not repeatedly prompted
• Communicating with you regarding support requests you initiate

We do not use any collected information for advertising, remarketing, behavioral targeting, analytics, or profiling purposes.

Sharing Your Personal Information

We do not share, sell, rent, or trade any personal information with third parties. The App does not transmit data to external servers, analytics services, or advertising platforms.

We may disclose information only if required to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

Your Rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you (for example, if you install the App through the Shopify App Store), or otherwise to pursue our legitimate business interests listed above. Please note that your information may be transferred outside of Europe, including to Canada.

Since the App stores verification tokens only in the visitor's own browser, visitors can clear this data at any time by clearing their browser's localStorage and sessionStorage.

Data Retention

The App stores age verification tokens in the visitor's browser with the following retention periods, as configured by the merchant:

• Session mode — the token is stored in sessionStorage and is automatically cleared when the browser tab is closed.
• Duration mode (30 or 365 days) — the token is stored in localStorage with an expiry timestamp and is automatically invalidated after the configured period.

We do not maintain any server-side records of individual visitor verification data.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at:

CodeMax Digital Inc.
Canada