Privacy policy

COD Shield — last updated 7 October 2026

What the app does

The app hides the Cash on Delivery payment option at checkout for customers whose phone number or email address is on the store's own fake-order blacklist.

What data the app handles

• Store session data — the shop domain and the access token Shopify issues when the app is installed. Used only to let the store turn the feature on and off.
• The blacklist — phone numbers and email addresses provided by the store owner from their own order history (customers who repeatedly refused or returned Cash on Delivery orders). Inside the checkout function, email addresses are stored only as one-way hashes.
• At checkout — the phone number and email the customer enters are compared with the blacklist inside Shopify's own checkout. They are not sent to or stored by the app.

The app does not read orders or customer records, and does not sell or share data.

Where data is stored

Session data and the blacklist are stored in a private PostgreSQL database (Supabase) that is not publicly accessible. The checkout copy of the blacklist lives inside the app's Shopify Function.

Retention and deletion

Session data is deleted when the app is uninstalled. Blacklist entries are kept until the store removes them. Privacy requests received from Shopify (customer data requests and erasure requests) are handled within 30 days.

Contact

Questions or requests: bilalburney.works@gmail.com