Privacy
What is stored in WordPress
RedeemID keeps a mirror of a few Shopify customer fields as user meta on the linked WordPress account:
- Shopify customer ID and customer number
- email, first name and last name
- customer tags
- account status
- email and SMS marketing consent
- a purchasing summary
- when the record was last synced
Shopify access tokens are stored encrypted inside the WordPress session and are removed when the account is unlinked or erased.
With Shopify’s own WordPress plugin active, the cart bridge stores two flags in the visitor’s browser localStorage (redeemid:attachedCart and redeemid:signedInCart). No cart IDs are kept on the server.
Export and erasure
RedeemID registers with WordPress’ own privacy tools (Tools → Export Personal Data and Tools → Erase Personal Data), under the name “Shopify link and synced data”.
- Export adds the mirrored fields above to the person’s export file.
- Erase removes the Shopify link, the mirrored fields and any stored tokens. The WordPress account stays. The Shopify customer record itself is managed in Shopify.
Shopify’s privacy webhooks
Shopify sends three compliance topics. They can’t be subscribed through the API: Shopify sends them only to apps that declare them in the app’s configuration, so add them to your Dev Dashboard app.
| Topic | What RedeemID does |
|---|---|
customers/data_request |
Creates a WordPress export request for the customer, which the exporter above fills in. |
customers/redact |
Removes the Shopify link, mirrored fields and tokens. A shadow user (an account RedeemID created at sign-in) is deleted, and their content is reassigned to the first administrator. A linked existing account is kept. |
shop/redact |
Removes the Shopify link, mirrored fields and tokens from every linked account. |
The redeemid_reassign_user filter changes which user receives a deleted shadow user’s content. Return null to delete that content instead.
Uninstalling
Uninstalling keeps WordPress users by default. See Install for what it removes, and for the constant that also deletes shadow users.