Privacy Policy

Last updated: 21 October 2026

The short version

hoop Search, Filter & Discovery adds fast search and filters to your Shopify store.
Search runs in each shopper's own browser. What shoppers type is never sent to our servers to get results.
With "Collect search analytics" on, and only for shoppers who allow analytics in your store's cookie banner, a small record of each search, click and add to cart is sent to us, and orders that came through search are matched to them. It holds no shopper ID, IP address or account. Search words are kept as typed, minus email addresses and long numbers, so a shopper could still type something personal into the search box. You can switch it off at any time; that stops new collection.
Your search settings are kept in our database, with a copy in your Shopify store that your storefront reads.
We keep the minimum needed to run the app (your store's name and address and encrypted access keys), and delete it when you uninstall.
No advertising, no tracking of shoppers who said no to analytics, no selling or renting of data, and no use of your data to train AI models.

1. Who we are

hoop Search, Filter & Discovery ("the app") is a Shopify app made by Hoop Interactive LLC ("we", "us"). This policy covers the app, including its admin screens in Shopify, the search it adds to your storefront, and its servers at search.hoopinteractive.com. For the data described here, Hoop Interactive LLC, a Wyoming limited liability company at 30 N Gould St #20402, Sheridan, WY 82801, USA, is the data controller. Contact: hi@hoopinteractive.com.

This policy covers the app only. Our company website, hoopinteractive.com, has its own privacy policy; the app does not use the website's analytics or advertising cookies.

2. What we collect

The app is used by Shopify merchants ("you"). Here is everything it handles, and where each item lives.

Data	Where it comes from	Why	Where it is kept
Your store's Shopify address (myshopify.com domain), store name and app installation ID	Shopify, when you install	To know which store is using the app	Our database
Shopify access keys	Shopify, when you open the app	To publish your search settings to your store, to check your plan, and to read which of your orders came through search (see below)	Our database, encrypted
When you last opened the app, and when you last saved your search settings	The app	To know which stores use the app and to fix setup problems	Our database
Your search settings: look, synonyms, filters and rules	You, in the app	To make search on your store work the way you chose	Our database, and a copy in your Shopify store (as app data) that your storefront reads
Your plan: which plan, monthly or yearly, Shopify's subscription ID and when your free trial started	Shopify, when you choose a plan	To give your store the features of its plan and the trial only once	Our database
Search events: what a shopper searched for (trimmed, lower case, 100 characters at most, with email addresses and long numbers removed), how many results it had, which product they clicked and where in the list, which filter they used, whether it was the dropdown or the results page, and a random ID that ties a click to its search. No shopper ID is kept	The shopper's browser, through the app's Shopify pixel, only if the shopper allows analytics and you leave "Collect search analytics" on	To show you what shoppers search for, what they find and what they miss	Our database, for 90 days
Search-credited order lines: the order ID, the product, the quantity and the amount of each order line a shopper reached through search, minus refunds and cancellations, with the search words that led to it. No name, email, phone, address or other customer data	Shopify's order notifications (webhooks), and a hidden mark the search adds to the shopper's cart (only if the shopper allows analytics)	To show you how much your search earns	Our database, for 2 years
Daily totals: per day, the number of searches, searches with no results, clicks, add to carts and orders from search, and the money from them, also per search word, product and feature	Counted from the two items above, updated through the day	To keep your reports fast and your history longer than the events	Our database, for 2 years
Look versions: a short code and the time each change to how your search looks went live	The app	To show whether a new look sold better	Our database
Feature ideas and likes you post on the Feature requests page	You	To decide what to build. Other merchants see the idea but never your store name.	Our database
Your reasons for uninstalling, if you give them to Shopify	Shopify (Partner API), after you uninstall	To understand why merchants leave and improve the app	Our database
Server logs: requests to our servers, your store's address, and error details	Our servers	To keep the app running and secure, and to fix problems	Our hosting provider

In plain words: the app adds a pixel to your store, which sends the search events to us, and it reads your orders to find which ones came through search.

When you email us, we also have your email and whatever you write, which we use only to answer you.

3. What we don't collect

No shopper ID, and nothing added that identifies a shopper. We store no shopper ID, no IP address, no account, and no customer ID or Shopify browser ID, and we never read customers' names, email addresses, postal addresses or phone numbers. From orders we read only the order ID, the products, quantities and amounts of the lines that came through search, and the hidden search mark on the order. Shopify classes order data as "protected customer data"; we ask for the lowest level, which excludes personal details.
Search words are kept as typed or spoken. Before storing them we remove email addresses and long numbers (such as phone or card numbers). A shopper could still type something personal into the search box, which is why we keep search events for only 90 days.
The hidden cart mark (the search words and the products) is visible to you on the order in Shopify.
No tracking of shoppers who say no. The search on your store reads your published products straight from Shopify in the shopper's browser. The search itself makes no requests to our servers and sets no cookies, and it works the same if our servers are down. Only the app's Shopify pixel sends anything to us, in small batches, and Shopify runs it only for shoppers who allow analytics. The hidden cart mark is also added only for those shoppers. If you switch "Collect search analytics" off, no events are sent and no carts are marked.
What stays in a shopper's browser: a copy of your published product list (to make search fast on the next visit), the shopper's own recent searches and, if you turn them on, the products they looked at (personal results) and the filters they last used on a collection (remembered filters). All of it is kept on their device only, never sent to us, and the shopper can remove it at any time by clearing their browser's site data.
Voice search, if you turn it on: when a shopper taps the microphone, their browser turns what they say into text using the browser's own speech service (for example Google's in Chrome, Apple's in Safari), under that company's privacy terms. The recording never reaches us. The app receives only the words, like typed ones, and they count like any typed search (see the search events above). Browsers without a speech service show no microphone.
No tracking in the app's admin screens, and no advertising anywhere.

4. How we use it

Only to run the app for you, keep it secure, answer you, and decide what to improve. We do not sell or rent data, and we do not use it for advertising or to train AI models.

Shoppers: search events and the cart mark happen only when the shopper allows analytics in your store's cookie banner (or where the law needs no consent). A shopper who says no is not recorded.
You: the "Collect search analytics" switch on the Analytics page is on by default. Switch it off and the search sends no events, marks no carts, the pixel sends nothing, Google Analytics gets nothing, and reports stop. Turning it off stops new collection; it does not delete what is already kept. That goes after 90 days or 2 years, or 48 hours after you uninstall.
Google Analytics: events go to Google Analytics only if you enter your own measurement ID. They are the same search events, including the search words, and then Google is your service provider for them, under Google's terms.

Research

We may use totals across many stores (for example, which search features lead to more orders) to learn what works and to improve the app. Those totals have the store left out: they do not name your store, and no search words are tied to it.

Only the service providers that run the app for us: our hosting provider (servers, database and logs) and Shopify. They may use it only to provide their service to us. We share data if the law requires it.

6. How we protect it

Access keys are encrypted (AES-256-GCM). Every request from Shopify is checked for a valid signature. Data is sent over HTTPS only. Only the people who run the app can reach the database.

7. How long we keep it

When you uninstall: we delete your Shopify access keys at once, and Shopify deletes the copy of your settings in your store. We keep your settings until the erasure request below, so reinstalling within 48 hours brings them back.
48 hours later (Shopify's erasure request, shop/redact): we delete everything we hold about your store, including its search events, search-credited order lines, daily totals and look versions. Uninstall reasons are kept only in anonymous form, without your store's name or address. Research totals that no longer name your store stay.
Search events: 90 days, then deleted automatically (we check once a day).
Search-credited order lines and daily totals: 2 years, then deleted automatically (we check once a day).
A customer's erasure request (customers/redact): we hold no customer data, only order IDs. We delete the order lines for the orders named in the request. A data request (customers/data_request) finds nothing about the customer, because we keep nothing that identifies them.
Server logs are kept by our hosting provider for a limited time and then deleted.

8. Your rights

You can ask to see, correct or delete your data, and, where the law gives you the right (for example under the GDPR, UK GDPR or CCPA), object to or limit how we use it. Email hi@hoopinteractive.com; we reply within 30 days.

9. Where it is stored

Our servers and database are hosted in the United States. Where the law requires it, transfers are protected by standard contractual clauses.

10. Children

The app is for businesses and is not meant for children.

11. Changes

If we change this policy, we will update the date at the top. For important changes, such as collecting a new kind of data, we will tell you in the app or by email before they take effect.

12. Contact

Hoop Interactive LLC
30 N Gould St #20402, Sheridan, WY 82801, USA
Email: hi@hoopinteractive.com
Phone: +1 (307) 310-6766