Stakeout
Privacy Policy
Last updated: March 3, 2026
Stakeout Store Locator (“Stakeout”, “we”, “our”) is a Shopify app that helps merchants display their physical store locations on an interactive map. This policy explains what data we collect, why, and how we handle it.
1. Data We Collect
Merchant data (provided by you when you install the app)
- Shopify session info — shop domain, staff name, email, and OAuth tokens. This is standard Shopify authentication data required for the app to function.
- App settings — map provider preference, API keys (Mapbox token, Google Maps key), widget styling choices (colors, fonts, layout).
- Location data — store names, addresses, phone numbers, hours, tags, images, and coordinates that you enter or import.
Customer analytics (collected automatically from storefront visitors)
| Data point | Example | Contains PII? |
|---|---|---|
| Event type | page_view, search, location_click, direction_click | No |
| Search query | “Austin, TX” | No |
| Location ID clicked | Internal location identifier | No |
We do not collect customer names, emails, IP addresses, device fingerprints, or any other personally identifiable information from storefront visitors.
Data we do NOT collect
- Customer accounts or personal information
- Payment or billing details (handled entirely by Shopify)
- Browsing history beyond the store locator widget
- Cookies on the storefront
2. How We Use Your Data
- Merchant data — to render your store locator widget, authenticate your admin session, and save your configuration.
- Location data — to display your stores on the map and in search results on your storefront.
- Analytics data — to power the analytics dashboard in the app admin so you can see how customers interact with your store locator.
We do not sell, rent, or share your data with third parties for marketing purposes.
3. Third-Party Services
Depending on your configuration, the store locator widget communicates with the following services:
| Service | Purpose | Data sent |
|---|---|---|
| Mapbox (mapbox.com) | Map rendering, geocoding search queries | Your Mapbox token, search text entered by customers |
| Google Maps (google.com) | Map rendering, geocoding (if selected as provider) | Your Google Maps key, search text entered by customers |
| Google Fonts (fonts.googleapis.com) | Custom font loading (if a non-system font is selected) | Standard HTTP request headers |
| Google Sheets (googleapis.com) | Optional location import/sync | Sheet ID, location data read from your spreadsheet |
Each service is governed by its own privacy policy. We only connect to these services when you explicitly configure them in the app.
4. Data Retention
- Analytics events are automatically deleted after 90 days.
- Merchant settings and location data are retained as long as the app is installed.
- Session data is retained as long as the app is installed and is refreshed by Shopify automatically.
5. Data Deletion
On app uninstall
When you uninstall Stakeout, we immediately and permanently delete:
- All session and authentication data
- Your shop record and widget settings
- All location data
- All analytics events
Deletion is automatic and complete — no data is retained after uninstall.
On request
You may request deletion of your data at any time by contacting us. We will process your request within 30 days.
GDPR compliance
We handle all mandatory Shopify GDPR webhooks:
- Customer data request — we confirm that no customer personal data is stored.
- Customer data erasure — we confirm that no customer personal data needs to be erased.
- Shop data erasure — we delete all shop data, locations, and analytics.
6. Data Security
- All communication between the app and Shopify uses HTTPS/TLS encryption.
- API keys (Mapbox, Google Maps) are stored server-side and only transmitted to the storefront as needed for map rendering.
- Public API endpoints are rate-limited to prevent abuse.
- We do not store any data in plaintext logs.
7. Your Rights
If you are located in the EU/EEA, UK, or California, you have the right to:
- Access the data we hold about your shop
- Request correction of inaccurate data
- Request deletion of your data
- Export your location data
To exercise these rights, contact us at the address below.
8. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated through the app admin or via email. The “Last updated” date at the top reflects the most recent revision.
9. Contact
For privacy questions or data requests:
Stakeout Store Locator
Email: support@stakeoutlocator.com
Website: stakeoutlocator.com