Privacy Policy — Bot Shield Suite
Last updated: 23 September 2026
1. Controller
Onur Cirakoglu — Headon, Germany.
Email: hallo@headon.pro
Web: https://headon.pro
2. What the app does
Bot Shield Suite analyses a store's abandoned checkouts to detect bot-generated fake checkouts. Towards the merchant we act as controller for account administration and billing; for the store data the app processes on the merchant's instruction we act as a processor under Art. 28 GDPR. A Data Processing Agreement is available on request at hallo@headon.pro.
3. Data the app processes
- Shop domain and Shopify session tokens — to associate settings and billing with the store and authenticate against the Shopify Admin API. Legal basis: Art. 6(1)(b) GDPR.
- Checkout signals — for each abandoned checkout the app receives, it processes the email address only in memory to score it, and stores at rest a one-way SHA-256 hash plus the email domain, never the raw address, together with Shopify's checkout token (to recognise repeat deliveries of the same checkout). It also stores non-personal signals (permalink shape, referrer presence, a bot/suspect verdict).
- Mail-server lookup — to tell a real address from an undeliverable one, the app asks public DNS whether the email's domain can receive mail (its mail-server records, or its address records when it has none). Only the domain part leaves the server, never the address itself, and answers are cached for up to a day so the same domain is not looked up for every checkout. Legal basis: Art. 6(1)(f) GDPR (protecting the merchant's store from bot traffic).
- Customer tags — on a bot verdict the app may add a tag to the matching Shopify customer so the merchant can exclude them from email flows. This is written back to the merchant's store. The app keeps the Shopify customer ID of a tagged customer with the detection event so the tag can be removed again (undo).
- Data access requests — when Shopify forwards a customer's data access request (
customers/data_request), the app compiles a report of everything it stores about that customer and keeps it, so the merchant can view, copy and hand it over from the app's dashboard. The report is referenced by the Shopify customer ID (or only the email domain when no ID is supplied), never by the email address, and contains the stored detection events (checkout token, verdict, score, email domain, timestamps). It is kept solely so the access request can be answered.
4. Where data is stored
On servers operated by Hetzner in Germany, and in the merchant's own Shopify store (tags). No customer data is sold or used for advertising.
5. Retention and deletion
Detection events are deleted automatically after the merchant-configurable retention window (30/60/90/180 days, default 90). On a Shopify customers/redact request the app deletes the matching hashed events and any stored data-request report for that customer. Data-request reports are deleted automatically after 90 days at the latest. On app uninstall and shop/redact all data for the shop is deleted, including data-request reports. You may also request deletion informally at hallo@headon.pro.
6. Sub-processors
Hetzner Online GmbH (hosting, Germany). Shopify Inc. (platform). No other sub-processors receive personal data.
7. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection. Contact hallo@headon.pro; we respond within one month.
8. Changes
Material changes are announced in the app at least 30 days in advance. The version published here is authoritative.