Privacy policy
Last updated October 7, 2026
Mint Scan to Pack is a Shopify app made by Mint Labs ("we", "us"). It is a packing station: staff scan each item of an order before it ships, and the app checks it against the order. This policy explains what the app handles, why, and when it's deleted. For anything relating to the merchant's orders we act as a service provider (processor) to the merchant, who is the controller.
The short version
- The app reads order numbers and the items to ship (with product titles, barcodes, SKUs and images) from Shopify.
- It never requests, stores or shows customer names, email addresses, phone numbers or addresses, and it stores no customer IDs.
- Packer names are whatever the merchant's staff type on the station (for example a first name). They aren't linked to Shopify staff accounts.
- We never sell or share data, use it for advertising, or combine it across stores. The app adds nothing to the storefront or checkout.
What the app handles
| Information | Why | Kept |
|---|---|---|
| Store domain and a Shopify access token | To read orders and items, save the packing record, the photo and (when asked) fulfillments. | Until uninstall |
| Store name and time zone | Shown on the station; months and days in the store's calendar (monthly order count, stats). | Until store deletion |
| Packing records: order ID and number, the items and quantities to pack, every scan (the barcode or SKU scanned and the result), counts, items confirmed by hand with the reason, missing items with the note, packer name, station, times, fulfillment IDs | The packing check itself, the history, packer stats and CSV exports. | 13 months |
| Packed-box photos (Pro and Plus) | Uploaded straight to the store's own Shopify Files and linked on the order. The app keeps only the file's ID. | In the merchant's Shopify Files until they delete it |
| Stations: names, locations, a hash of each device link | To run several packing tables and open them on other devices. | Until deleted or store deletion |
| Plan (Free, Pro or Plus) and its dates | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. | Until store deletion |
What the app writes to the store
- App-owned order metafields with the packing result and record (shown in the "Packing record" block on the order page) and the photo reference.
- Files in Shopify Files (packed-box photos), only when a packer takes one.
- Fulfillments, only when a packer ticks "Mark as fulfilled"; Shopify then emails the shipping confirmation only if the packer ticked that too.
The app never edits the order itself, its notes or tags, products, inventory, the theme or the checkout.
Station device links
A merchant can open a station on another device with a link. The link contains a long random code; we store only a one-way hash of it. Anyone with the link can see order numbers and items for packing at that station (no customer details). The merchant can replace or switch off a link at any time, and every link stops working when the app is uninstalled.
Customer privacy requests
- Access requests (
customers/data_request): the app holds no information about customers (no names, contact details, addresses or customer IDs), so there is nothing to return. - Erasure requests (
customers/redact): the packing records of the orders Shopify lists in the request are deleted. - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we permanently delete everything we hold for the store.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting and database) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Access is limited to Mint Labs staff who need it to provide support. We use no analytics or trackers. The station remembers the packer name on the device (local browser storage) only for convenience. See our security policy.
Retention
- Packing records and scans: 13 months from the day packing started, then deleted (Free and Pro plans show the last 90 days).
- Packing sessions left open for 12 hours are closed automatically.
- Access tokens: deleted when the app is uninstalled. Everything else: deleted when Shopify sends the store deletion request 48 hours later.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants and their staff can contact us directly; customers should contact the store, or email us and we'll help. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs: support@stickermint.com