Privacy policy
Last updated 26 September 2026
Yulebox is a Shopify app that puts an advent calendar on a store: one door a day, with a reward or a story behind it. This policy explains what the app processes, for whom and for how long. Goodbirch ("we"), operated by DEC ehf. (reg. no. 471119-1720), provides the app. For the personal data of a store's visitors, the store is the controller and we are its processor.
Data about merchants
When a store installs Yulebox we receive from Shopify the store's domain, currency, time zone and language, and an access token that lets the app read the store's products, create discount codes and add customers. We use these only to run the app. What the merchant creates in the app (calendars, door texts, themes and uploaded artwork) is kept until they delete it or uninstall the app.
When a merchant uses the AI features, what they give them (uploaded artwork, a description, brand colours, brand facts and the products they pick) is sent to Anthropic to draft designs and door stories. No data about the store's visitors is sent.
Data about the store's visitors
| What | Why | Kept |
|---|---|---|
| Email address, when the calendar asks for one to open doors | Added to the store's Shopify customers, with the calendar's tag. We keep only a one-way keyed hash of it (never the address) to recognise the same person on another device | The hash: until 13 months after the calendar's last door, then removed automatically; sooner if the store uninstalls or Shopify asks us to redact it |
| Whether they ticked the sign-up box | Recorded on the store's Shopify customer as email marketing consent. Without the tick they're added without consent | As above |
| The doors they opened, the reward and discount code behind each, and the door stories they read or clicked | Only today's door opens and opened doors stay open; the store's results | As above |
| For logged-in customers, their Shopify customer ID; otherwise a random ID made in their browser | Telling visitors apart | As above |
Customers and discount codes live in the store's Shopify admin, under the store's own privacy policy. The calendar keeps a random visitor ID, a sign-up token and, on preview pages, the preview password in the visitor's browser (local storage). It sets no cookies and does no tracking or advertising.
Sub-processors
- Shopify (the store's platform)
- Vercel: hosting, in Frankfurt (EU)
- Neon: database, in Frankfurt (EU)
- Anthropic: AI designs and door-story drafts, from the merchant's own content only
- Bunny Fonts: the calendar theme's web fonts, loaded by the visitor's browser, if the store keeps them switched on
Your rights
Visitors should contact the store; we act on the store's instructions. We honour Shopify's data-request and redaction requests automatically: a redaction removes the person's sign-up, door openings and story reads. When a store uninstalls, Shopify asks us to erase its data 48 hours later, and we do.
Security
All traffic is encrypted. Data is stored in the EU by our database provider, encrypted at rest. Email addresses are never stored, and the keyed hash can't be reversed without our secret key. Discount codes are single-use.