← GridCart

Privacy Policy — GridCart

Last updated: 4 November 2026

GridCart ("we") is a Shopify app, built by Metigro, that draws product variants as a size×color grid instead of a sequence of dropdowns. The app is installed and configured entirely by the merchant; it has no customer-facing account of its own and no direct interaction with shoppers.

The most important part, in one paragraph

GridCart does not see or store any data about your store's shoppers. The grid is drawn in the shopper's browser from data the theme already hands over on the product page (Liquid), and the "Add all to cart" button calls Shopify's own /cart/add.js endpoint directly — no shopper request ever passes through GridCart's servers.

What store data we receive

Product catalog. Under the read_products scope (the only one the app requests), we read product and variant names, SKU, price, stock status, and images — only to show the grid preview in the admin. We never request or receive write access, access to orders, customer data, or payment information.

What we store

• Grid settings (layout, which product options map to rows and columns, what to show in each cell, minimum/step/maximum quantity, button label) — tied to the store, not to a shopper.
• Subscription state (plan, trial) — through Shopify's own Billing API.
• Published settings are mirrored into a metafield on the app's own installation in Shopify (app:gridcart.settings), so the theme block can read them on the storefront. This lives in Shopify, not in a separate database, and travels with the installation.

What we don't collect

No data about your store's shoppers at all: no emails, no addresses, no order history, no on-site behavior. We have no code path that reads this data, and no scope that would grant access to it.

Cancellation and data deletion

Cancelling the subscription removes the grid from the storefront within a minute; settings stay in the app, so turning it back on doesn't force you to configure everything again. Uninstalling the app immediately removes the metafield from the store (along with the installation) and resets the plan. Full deletion of stored settings happens within 48 hours of Shopify's mandatory shop/redact webhook — the same as for any other GDPR request to delete store data.

Subprocessors

The only subprocessor is Shopify: platform, authentication, and billing. GridCart uses no analytics, advertising pixels, or other third-party services on the storefront product page.

Changes to this policy

We'll note material changes by updating the date above. Continuing to use the app after a change means you accept the new version.

Contact us

Questions about this policy or about your store's data — [email protected].