Privacy Policy

Locastore - Store Locator Map — Last updated: September 17, 2026

What we store

Locastore stores the data the merchant provides in order to operate the store locator:

• The store's myshopify.com domain and Shopify API access token, required to run the app.
• Store locations created or imported by the merchant: name, address, coordinates, phone number, website, description, photo, opening hours, tags and visibility.
• Widget appearance settings: layout, map style, accent color, default center and zoom, distance unit, language and labels.
• Anonymous widget events: searches, store views, direction clicks, phone clicks and website clicks.

Customer data

Locastore does not request Shopify customer records. Widget analytics store only event type, time and the selected store location, plus whether a search used text or geolocation. Search text, visitor coordinates, IP addresses, user agents, cookies and visitor identifiers are not stored in the analytics database. The “Near me” button requests browser permission and uses the position locally to sort stores and center the map.

Third-party services

• Map tiles are loaded by the visitor's browser from OpenStreetMap and CARTO. These providers receive connection information such as the IP address and requested map area.
• Address search in the widget and address geocoding in the admin use the OpenStreetMap Nominatim service. The text entered by the visitor is sent to Nominatim and can include a personal address. The visitor’s browser connects directly to this service, which also receives connection information such as the IP address.
• Directions open in Google Maps in a new tab, at the visitor's own initiative.

Locastore requires no Google Maps API key and sends no data to Google unless a visitor clicks a directions link.

Hosting

The app and its database run on servers operated by Hetzner Online GmbH in Germany (European Union).

Data retention and deletion

Anonymous analytics events are automatically deleted after 1,100 days (approximately 3 years). Merchants can delete any location at any time from the app. When Shopify sends the shop/redact request after uninstall, all data related to the shop is permanently deleted from our servers.

GDPR

The app implements Shopify's mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). Analytics events are not linked to a Shopify customer ID, so they cannot be looked up by customer ID.

Contact

For any privacy question, contact us at [email protected].