Applies to the Shopify app Scaly Visual Product Builder. Last updated: 13 September 2026. Separate policies apply to Scaly Bundle & Set Builder and to Scaly Advent & Deal Calendar.
The app does not read, store or process personal data of your customers. It does not use cookies, and it does not track anyone. The part of the app that runs in your storefront makes no request to our servers at all.
When you install the app, Shopify grants it these permissions:
read_products: to read the products and variants you offer as partsread_themes, write_themes: to place the builder's app block in your theme and open the theme editor at itread_app_proxy, write_app_proxy: to serve the builder through your own domain instead of oursread_files, write_files: to store images you upload for parts in your own Shopify Fileswrite_content: to write the builder's configuration into your shop's metafieldNone of these permissions reaches customer data. The app does not request access to protected customer data, and Shopify would not grant it.
Your builder configuration (which products belong to which layer, the categories, the anchor
points you set on each image) is stored in your own shop, in the shop metafield
custom_designer_charms.necklace_config. Images you upload for parts are stored in your
own Shopify Files. Both stay with Shopify. The app has no product database of its own.
The app runs on Cloudflare Workers. For operating and supporting it, we keep the following per store, in Cloudflare KV:
.myshopify.com domainshop/redact after
you uninstall, and it stops working the moment you uninstallWe do not store your orders, your customers, your prices, or any product data beyond the configuration copy described above.
The app's admin pages show a chat bubble in the bottom right corner. When you open it and write
to us, our support service (support.scalyapp.de, also on Cloudflare Workers) stores the
conversation: your messages and our replies with timestamps, your .myshopify.com
domain, your store's name, the app you wrote from, your admin language and an email address (by
default the store owner's email from Shopify, or the one you enter in the chat). We use this only to
answer you. If we are offline, your message is forwarded to our support mailbox by email, and
replies you have not read in the chat are sent to you by email.
Nothing is stored until you send a message. Conversations are deleted 400 days after the last message, when you uninstall the app (see Deletion), or earlier on request.
The builder on your storefront is rendered by a Shopify theme app extension. It reads your configuration directly from the shop metafield through Liquid and adds items to the cart through Shopify's own cart API. It never contacts our servers, sets no cookies and collects no analytics. We therefore have no data about your customers, not even in aggregate.
No other party receives data from the app or the support chat.
The app answers all three of Shopify's mandatory compliance webhooks. When you uninstall the app
and Shopify sends shop/redact, we delete your store record, the event log and the access
token. Because we hold no customer data, customers/data_request and
customers/redact have nothing to return or erase.
On shop/redact we also delete your support chat conversation, if there is one.
Your configuration metafield and the images in your Shopify Files remain in your store after uninstalling. They are yours. You can delete them in the Shopify admin at any time.
Questions about this policy, or a request regarding your data: support@scalyapp.de. Postal address and legal details: Impressum.