Privacy Policy

Guardly: Content Protection · Last updated October 28, 2026

Guardly: Content Protection (“Guardly”, “we”, “us”) is a free Shopify app by Boost Apps that helps a merchant make it harder for visitors to copy the images and text of their online store. This policy explains what data we handle and how.

Store data we access

Guardly uses only one Shopify permission:

• read_themes: to check whether the Guardly app embed is turned on in your published theme, so the app can show you its setup status. Guardly never changes your theme.

Guardly does not request access to your products, orders, customers or any protected customer data.

Information we store

Your protection settings (which actions are blocked, the message shoppers see and the pages it applies to) and the app’s Shopify session are stored in your own store as Shopify metafields.

Our servers run on Cloudflare. Cloudflare Workers KV holds the store’s Shopify access token and session and your admin language choice.

Our internal admin service (Boost Apps admin, backed by a Supabase database) keeps a record for each store that installs the app: store domain, store name, store email, shop owner name, primary domain, country, currency, Shopify plan, install/uninstall dates and, while the app is installed, the Shopify access token. We use this record to support you and to send emails.

Storefront behaviour

Your theme loads a very small script from Shopify’s servers, based on your saved settings. In the shopper’s browser it blocks the actions you chose (for example right-click on images or copying text) and can show a short message. When you choose to leave logged-in customers out, your theme checks on Shopify’s servers whether a customer is logged in; that result is not sent anywhere. Guardly makes copying harder; it cannot stop screenshots or browser developer tools. Guardly sets no cookies and has no tracking, and shoppers’ browsers never contact our servers. Nothing about shoppers is collected or sent to us or to any third party.

Emails

We send a welcome email when you install the app and a goodbye email when you uninstall it, and occasional product update emails to the store email. Emails are delivered through Resend. Every promotional email contains an unsubscribe link.

Service providers

We do not sell or rent your data. We use these service providers to run the app:

• Cloudflare: app hosting and storage of access tokens and sessions.
• Supabase: database for the store records described above.
• Resend: delivery of the emails described above.
• Tidio: live chat loaded only inside the app’s admin (never on your storefront) so you can reach our support team. So we can help without asking for details first, the chat receives your store’s name, myshopify address, website, contact email, Shopify plan and country, the name, email and role of the staff member using the app, and which app page they are on. It never receives any data about your customers. Messages you send and basic technical data (such as your IP address) are processed by Tidio under their privacy policy.

Data retention and deletion

When you uninstall Guardly, we delete the cached access token and session within minutes. Settings stored as metafields are removed by Shopify with the app. Shopify’s shop/redact request, sent 48 hours after an uninstall, removes anything left. Because Guardly never stores customer data, customers/data_request and customers/redact requests have nothing to return or erase.

Your rights

You can ask us to access, correct or delete the data described above at any time by emailing boostappspro@gmail.com.

Contact

Boost Apps · boostappspro@gmail.com