Privacy policy
Last updated 24 September 2026
Tickwheel is a Shopify app that lets a store show a prize wheel to its visitors. This policy explains what the app processes, for whom and for how long. Goodbirch ("we") provides the app. For the personal data of a store's visitors, the store is the controller and we are its processor.
Data about merchants
When a store installs Tickwheel we receive from Shopify the store's name, domain, contact email, currency and language, and an access token that lets the app create discount codes and customers for that store. We use these only to run the app.
Data about the store's visitors
| What | Why | Kept |
|---|---|---|
| Email address the visitor types into the wheel | One spin per person; the prize code is locked to it and sent to it | At most 24 months, then removed automatically; sooner if the store uninstalls or Shopify asks us to redact it |
| Whether they ticked the marketing box | Recorded on the store's Shopify customer, as consent | As above |
| A one-way hash of the visitor's IP address (never the address itself) | Limiting abuse (many spins from one network) | As above |
| Prize, code, and whether it was used (order number and amount) | The store's campaign report | As above |
The app creates a customer in the store's Shopify admin for each winner, and a discount code. Codes that were never used are deleted from the store a week after they expire. Those live in Shopify under the store's own privacy policy.
Sub-processors
- Shopify (the store's platform)
- Klaviyo or Mailchimp, only if the store connects them: the email, the marketing choice and the spin result are then sent to the store's own account there, on the store's instruction
- Cloudflare: hosting, database and bot protection (Turnstile)
- Resend: sending prize emails
Your rights
Visitors should contact the store; we act on the store's instructions. We honour Shopify's data-request and redaction requests automatically: a redaction removes the email and network hash and keeps only anonymous counts. When a store uninstalls, Shopify asks us to erase its data within 48 hours of the request, and we do.
Security
All traffic is encrypted. Access tokens are stored encrypted at rest by our database provider. Discount codes are single-use and locked to one customer.