Legal

Privacy Policy

Effective October 8, 2026

This policy explains how Metricby ("we", "us") handles data when a Shopify merchant installs and uses Google Analytics Conversion Tracking (the "App"). The App sends a store's ecommerce events to the merchant's own Google Analytics 4 (GA4) property.

Who this covers

Merchants who install the App, and shoppers who visit a store that uses it. For shopper data, the merchant decides what is collected and why; we process it on the merchant's behalf.

What we store

We do not store shoppers' names, email addresses, phone numbers, postal addresses or payment details.

What we send to Google Analytics

On your behalf, the App sends standard GA4 ecommerce events to your GA4 property:

Data in your GA4 property is governed by your agreement with Google and Google's privacy policy. We do not sell data or use it for advertising, and we do not combine it across stores.

Consent

You choose how the App handles shopper consent. In Auto Consent Mode the App follows each visitor's choice in your cookie banner; purchases from shoppers who decline analytics are sent without their visitor identifier. In No Consent Mode the App tracks every visitor. You are responsible for choosing the mode that matches your legal obligations.

How we use data

Only to provide the App: deliver events to your GA4 property, prevent duplicate purchases, show tracking status, and give you support.

Service providers

We use Shopify (store platform and order data), Google (sign-in and Google Analytics) and our hosting and database providers to run the App. They process data only as needed to provide their services.

Retention and deletion

When you uninstall the App, we delete your store's settings, Google connection and purchase delivery records, and revoke the App's access to your Google account. We also respond to Shopify's privacy webhooks for customer data requests and deletions. Data already sent to your GA4 property stays there under your control.

Security

Google credentials are encrypted at rest, data is sent over HTTPS, and access to production systems is restricted.

Your rights

You can ask to access, correct or delete data we hold about you. Shoppers should contact the store they purchased from; we will help the merchant respond. Contact us at [email protected].

Changes

We will update this page when our practices change and note the new effective date above.