What the app records
- Shopping activity
- Visitor details
- Customer details
- What you and shoppers enter
Collected by the app’s web pixel and storefront widget:
- Page views, product views and collection views
- Products added to and removed from the cart
- Checkout started, and the order placed (if any)
- The cart’s contents, totals, note and attributes
Cookies and browser storage
The widget stores a random visitor identifier named_cw_vid in a first-party cookie (valid for one year) and in the browser’s local and session storage. It’s used to keep a shopper’s Cart ID consistent between pages and visits. List it in your cookie policy as a functional/analytics identifier.
How long data is kept
Cart history is kept for the number of days your plan allows, counted from the shopper’s last activity:
Each day, carts older than your retention period are removed from the app, and permanently deleted 30 days later.
Who can see it
- Staff with access to the app in your Shopify admin.
- AI assistants you connect through MCP, limited to the tools you allow for each token. SMTP passwords are never shared with them.
Emails
Notification emails are sent through the CB SMTP server or your own SMTP server. Addresses that bounce or report spam are added to a suppression list so they aren’t emailed again.If you uninstall
When you uninstall the app, Shopify automatically:- removes the app embed from your theme,
- removes the app’s web pixel, and
- removes the widget settings the app published to your store.
Data requests
To ask for a copy of your data, or for your store’s data or a specific customer’s data to be deleted, email support@shopylyst.com from your store’s account email and include your store’s.myshopify.com address.