Every Possible Sort Privacy Policy

Privacy Policy - Every Possible Sort

Effective Date: July 29, 2026

Every Possible Sort (“we”, “us”) is a Shopify app, developed by Seventh Triangle Consulting, that automatically re-orders the products inside your Shopify collections based on rules you configure. This Privacy Policy explains what information the app accesses and stores, how we use it, who we share it with, and the choices you have. It applies to merchants who install Every Possible Sort and to the storefront visitors whose activity the app measures when Analytics is enabled.

1. Information we collect

Store & account data. When you install Every Possible Sort, we receive your store's myshopify.com domain, an access token that lets the app call the Shopify Admin API on your behalf, your store timezone, and the contact details Shopify associates with the install.

Store catalog data. To sort collections, the app reads data about your collections, products, variants, inventory levels, prices, tags, and metafields. This is read to compute sort order and to power the wizard's pickers and previews.

App configuration you create. The sorting rules, product groups, conditions, custom data points, and anchor products you set up inside the app.

Behavioral analytics (only if you enable Analytics). When you turn on the theme app embed and checkout web pixel, the app records storefront events - product impressions and clicks on collection pages and purchase events at checkout - and writes a first-party cookie so a later purchase can be attributed to the collection a shopper browsed. These events are aggregated into per-collection metrics (bestsellers, CTR, CVR, RPI). We do not use them to build advertising profiles of individual shoppers. These events are collected only where the shopper has granted analytics consent. The app reads the store's customer-consent status through Shopify's Customer Privacy framework and records nothing - no events and no cookie - unless analytics consent has been given; it also stops collecting as soon as consent is withdrawn.

Operational logs. To keep the service reliable and to help with support, we record technical logs of API requests, webhooks, scheduled jobs, and errors. These logs are automatically deleted after 30 days.

2. How we use information

  • Provide the core service - sorting your collections on the schedule and rules you define.
  • Power behavioral sorting (bestsellers, CTR, CVR, RPI) when Every Possible Sort Analytics is connected.
  • Maintain, troubleshoot, and secure the app, and respond to your support requests.
  • Comply with our legal obligations and Shopify's platform requirements.

We do not sell your data or your shoppers' data, and we do not use it for advertising.

3. Cookies

When Analytics is enabled, the app sets a single first-party cookie on your storefront. Its only purpose is attribution - linking a purchase back to the collection a shopper viewed - so we can compute per-collection performance metrics. It is not used for cross-site tracking or advertising. The cookie is set only after the shopper has granted analytics consent (via Shopify's Customer Privacy framework); if consent has not been given, no cookie is written and no events are collected.

4. How information is shared

We share data only with the service providers needed to run the app:

  • Shopify - the platform your store runs on; the app reads and writes collection order through Shopify's APIs.
  • Our hosting & database providers - where the app and its data are securely stored and processed.
  • Tawk.to - our in-app live chat. If you start a chat, the messages and basic contact details you provide are processed by Tawk.to to deliver support.

We may also disclose information if required by law or to protect our rights, users, or the public.

5. Data retention & deletion

We keep your store and configuration data for as long as Every Possible Sort is installed. When you uninstall the app, Shopify notifies us and we automatically purge your store's data - rules, groups, data points, anchor products, collection records, analytics, sessions, and logs. Operational logs are deleted on a rolling 30-day basis regardless of install status.

6. Your rights

Depending on where you or your shoppers are located (for example under GDPR or CCPA), you may have the right to access, correct, or delete personal data, or to object to certain processing. Shopify also forwards mandatory data-request and data-erasure webhooks, which we honor. To make a request, contact us at app@seventhtriangle.com and we'll respond within a reasonable timeframe.

7. Security

We use industry-standard measures to protect data in transit and at rest, restrict access to authorized personnel, and store access tokens securely. No method of transmission or storage is 100% secure, but we work to protect your information and to respond promptly to any incident.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll revise the "Effective Date" above. Material changes will be communicated through the app or by email where appropriate.