Privacy Policy

Locastore - Store Locator Map — Last updated: July 29, 2026

What we store

Locastore stores the data the merchant provides in order to operate the store locator:

• The store's myshopify.com domain and Shopify API access token, required to run the app.
• Store locations created or imported by the merchant: name, address, coordinates, phone number, website, description, photo, opening hours, tags and visibility.
• Widget appearance settings: layout, map style, accent color, default center and zoom, distance unit, language and labels.
• Anonymous widget events: searches, store views, direction clicks, phone clicks and website clicks.

Customer data

Locastore does not collect or store any personal data about the merchant's customers. Widget analytics events are anonymous: no IP address, no user agent, no cookies and no identifier of any kind is recorded. When a visitor uses the "Near me" button, their position is handled by the browser only, to sort the list locally. That position is never sent to us and never stored.

Third-party services

• Map tiles are loaded by the visitor's browser from OpenStreetMap and CARTO.
• Address search in the widget and address geocoding in the admin use the OpenStreetMap Nominatim service. Only the address text is sent, never customer data.
• Directions open in Google Maps in a new tab, at the visitor's own initiative.

Locastore requires no Google Maps API key and sends no data to Google unless a visitor clicks a directions link.

Hosting

The app and its database run on servers operated by Hetzner Online GmbH in Germany (European Union).

Data retention and deletion

Anonymous analytics events are automatically deleted after 3 years. Merchants can delete any location at any time from the app. When Shopify sends the shop/redact request after uninstall, all data related to the shop is permanently deleted from our servers.

GDPR

The app implements Shopify's mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). Since no customer personal data is stored, the customer data request and customer redact operations have nothing to return or erase.

Contact

For any privacy question, contact us at dev@vima.work.